The social network has been criticised for targeting ads using data people shared as a security check.