The guy standing between Facebook and its next privacy disaster