When Data Becomes Surveillance: What Meta’s Instagram DM Change Means for Marketers
Payal Parikh
Summary
Meta's recent decision to remove end-to-end encryption from Instagram DMs means private conversations are no longer truly private. This has real implications for how marketers could target audiences. While the change may seem distant from B2B marketing, it raises a question every marketer should sit with: just because you can use someone's private data to target them, does that mean you should? This is especially critical when vulnerable audiences like teenagers are involved and the brands that get this right will earn trust that no targeting algorithm can buy.
A quick note before we dive in: Heinz Marketing is a B2B marketing firm. We spend most of our time thinking about pipeline, sales cycles, and enterprise buying behavior. But marketing ethics is something that needs to be addressed – regardless of a B2B or a B2C firm. What happens in B2C today has a habit of shaping B2B norms tomorrow, take for example cookie deprecation, GDPR, consent frameworks. All of it started in the consumer world and eventually landed on every marketer’s desk. So while Instagram DMs aren’t our usual territory and this might not affect B2B marketers, we should still start thinking about it.
Let’s be honest, when Meta quietly removed end-to-end encryption from Instagram direct messages on May 8, 2026, most marketers probably didn’t lose sleep over it.
But maybe they should have.
Not because it’s going to eventually change how you run your campaigns. But because it raises a question that the marketing industry hasn’t fully answered yet: Just because we can use someone’s private data to target them, does that mean we should? This question has a deeper meaning for me personally as a moral compass – Just because you can, does that mean you should?
What Actually Happened
For those catching up: Meta removed end-to-end encryption (E2EE) from Instagram DMs, meaning Instagram now operates under standard encryption which is similar to Gmail. In plain English, Meta can now access the content of private messages on Instagram.
Meta’s reasoning? Very few users were opting into E2EE anyway. And for those who want truly private messaging, there’s always WhatsApp.
The change also aligns with the recently signed TAKE IT DOWN Act, which requires platforms to detect and remove exploitative content. E2EE makes this technically impossible.
Maybe it is reasonable and required for the safety of our kids. Now the predators can’t hide behind the private conversations. But the implications for how the private data could be used in advertising are worth a longer conversation.
The Targeting Opportunity Nobody’s Talking About (Yet)
Here’s the uncomfortable truth: private message content is extraordinarily rich data.
People don’t write DMs the way they write public posts. They’re unfiltered. They talk about what they actually want, what they’re struggling with, what they’re planning to buy, and how they really feel. For a marketer, that’s a goldmine.
Meta hasn’t announced plans to use DM content for ad targeting and regulatory constraints, especially in the EU, would limit how far they could go. But the door is now open in a way it wasn’t before. And when that door opens in tech, history tells us someone eventually walks through it and cash in.
CMOs should be thinking about this now rather than later.
The Ethical Line Isn’t Always Where the Legal Line Is
This is the part where we must be honest with ourselves as an industry.
Digital advertising has always pushed boundaries. We’ve justified a lot of data collection practices because they were technically legal, because users “agreed” (buried in terms of service), or because everyone else was doing it.
But consumer trust doesn’t operate on legal logic. It operates on felt fairness. And there’s something that feels deeply unfair about a teenager’s private conversation about their body, their relationships, their mental health, and that data being used to serve them an ad.
That’s not hypothetical. That’s where this road leads if the industry doesn’t draw its own lines.
Marketers who lead with ethics set a higher standard and increasingly, that standard is becoming a competitive advantage. Someone always taught me to take the high road and I am not going to let go of that valuable lesson.
Why Vulnerable Audiences Change Everything
The ethical calculus shifts dramatically depending on who you’re targeting.
A B2B software company targeting IT directors via LinkedIn? The stakes are different. These are adults, in a professional context, making considered decisions. Data-informed targeting there is just good marketing.
But when your audience includes teenagers or anyone in a vulnerable position the rules of engagement need to be different. Here’s why:
Teens don’t read terms of service. They don’t understand that writing “I’ve been feeling really anxious lately” in a DM could theoretically inform what ads they see next. That asymmetry of understanding is a power imbalance, and exploiting it is ethically indefensible regardless of legality.
Private conversations carry a different weight. There’s a reason people say things in DMs they’d never post publicly. There is an expectation of privacy. Breaking it for ad revenue corrodes trust that is very hard to rebuild.
The harm can be real. An ad triggered by a private conversation about body image, financial stress, or identity isn’t just intrusive, it can be genuinely harmful. The marketing industry needs to reckon with that.
What Forward-Looking Marketers Should Do
This isn’t a call to panic or to abandon Instagram as a platform. It’s a call to be intentional.
- Audit what you’re actually using. Do you know exactly what signals are informing your audience targeting on Instagram right now? Most marketers don’t, they use the tools Meta provides without questioning the underlying data. It’s worth knowing.
- Build an internal ethical framework for data use. Not a legal checklist, an actual values-based framework. Ask: would our customers be comfortable if they knew exactly how we targeted them? If the answer is no, that’s your signal.
- Weigh your targeting choices differently by audience. If any of your campaigns touch younger audiences or sensitive life moments (health, finances, relationships), apply a higher standard of scrutiny. Ask whether the targeting method is proportionate to the context.
- Watch how Meta evolves this. The removal of E2EE is a policy shift, not necessarily an advertising product change yet. Keep an eye on whether new targeting signals appear in Ads Manager in the coming months. The industry will definitely notice the changes.
- Use your voice. CMOs have more influence than they think. When major platforms make changes that affect user trust, marketers who speak up publicly or through industry bodies, help shape what comes next. And Silence is also a choice…
The Bottom Line
Meta’s Instagram DM change is a reminder that the infrastructure of digital advertising is always shifting beneath our feet. The platforms will always push toward more data. The question is whether marketers push back, because they’ve decided it’s the right thing to do.
The brands that will earn lasting loyalty in the next decade aren’t the ones with the most sophisticated targeting. They’re the ones that make people feel respected, not surveilled.
That’s not just good ethics. It’s good marketing.
Photo Credit: Photo by Zulfugar Karimov on Unsplash
