I deleted my Facebook account last Tuesday. Not deactivated - deleted. The permanent, 14-day-waiting-period, "are you sure you want to do this" kind of deleted. After five years and probably a thousand posts worth of personal data handed over to a company whose privacy practices I have been publicly criticizing for at least two of those years, I finally practiced what I preach.

It was not a dramatic moment. There was no single triggering event. It was more like the accumulation of a hundred small discomforts that eventually reached a threshold.

The Slow Realization

I wrote about Facebook's privacy erosion last November and my position has not changed. If anything, the intervening months have reinforced it. The facial recognition rollout in June was the most recent irritation - Facebook began automatically identifying faces in photos using biometric data it had been quietly collecting, and the feature was enabled by default. The opt-out was buried in settings. The pattern continues.

But my decision was not really about any single feature or policy change. It was about a more fundamental realization: I was maintaining an account on a platform whose core business model is incompatible with my professional values. I spend my working hours helping organizations protect sensitive data, manage access controls, and minimize their attack surface. Then I go home and voluntarily hand over detailed personal information to a company that has demonstrated repeatedly that it will use that information in ways I did not anticipate or consent to.

The cognitive dissonance was getting difficult to maintain.

What I Was Giving Up

Let me be honest about the cost. Facebook had become my primary channel for staying in touch with extended family, college friends, and former colleagues. Leaving meant losing easy access to those connections. Some of them I will maintain through email or phone. Many of them I will not, because the relationships existed primarily through the low-friction social maintenance that Facebook enables - the birthday wishes, the photo comments, the ambient awareness of what people are doing.

That is the real lock-in. Not the data, not the photos, not the messages. It is the social graph itself. Facebook has made itself the default communication layer for a significant portion of my personal relationships, and leaving the platform means accepting that some of those relationships will atrophy.

I made peace with that. The relationships that matter enough will survive the transition to other channels. The ones that do not were arguably not relationships so much as they were habits.

The Social Pressure

The most surprising part of this process was the reaction from other people. When I mentioned I was deleting my account, the most common response was not "good for you" or "that is extreme" but rather a slightly defensive "I have thought about it too, but..." followed by a reason why they could not or would not do the same.

There is genuine social pressure to stay on the platform. Leaving Facebook in 2011 feels mildly antisocial in a way that not joining Facebook in 2006 did not. Event invitations, group coordination, photo sharing - the assumption that everyone is on Facebook has become embedded in how people organize their social lives. Opting out carries a cost that goes beyond missing your cousin's vacation photos.

Alternatives and Adjustments

I have moved my professional networking entirely to LinkedIn, which has its own privacy concerns but at least operates under a business model where I am the customer rather than the product. For personal communication, I am back to email and an RSS reader for the blogs I actually care about following.

Diaspora remains interesting in theory but is not yet practical for mainstream use. Google+ launched last month and has some promising privacy features in its Circles model, but I am approaching it with caution. The history of social networks suggests that privacy-friendly defaults do not survive contact with advertising revenue targets.

The Broader Point

I am not evangelizing here. I do not think everyone should delete Facebook, and I understand the tradeoffs that keep most people on the platform. What I do think is that security professionals should be more thoughtful about the gap between the principles we espouse at work and the choices we make in our personal digital lives.

If you would flag a data handling practice as a risk in a vendor assessment, you should probably think twice before subjecting your own data to the same practice voluntarily. That is not paranoia. It is consistency.