As someone who has worked at meta in privacy, I don't think this would be hard to figure out for a small startup. The issue is that you can't share data between different apps, which is not a problem a small company would have since they wouldn't have multiple apps to begin with.
Meta, on the other hand, has data intertwined between Facebook, Messenger, Instagram, and other platforms. Plus, Meta's internal bureaucracy and ownership model is an absolute hellish mess.
I don't really feel too comfortable sharing specific details, but suffice it to say I've worked at a few large companies and my experience with Meta was one of too many cooks in the kitchen. Lots of overlap in ownership and the boundaries between teams IMHO was not very clear nor well thought out. This meant that launching anything required a lot of work across many teams (more than necessary IMHO).
> Also, can you elaborate on this?
As a simple example, the EU mandated that if you signed up for Instagram and you also signed up for Facebook using the same e-mail address, your personal information could not be shared (or used for targeting) between apps, unless you explicitly agree to link those two accounts together. This was a pretty clear-cut case, but it got much less clear when talking about Facebook vs Messenger (they are different apps, but direct messaging is also integrated into the Facebook website). Now if you start adding in things like Threads, Oculus, etc you can imagine the implications for how you share data will continue to get more complex.