It’s now explicitly against Facebook policy to harness user data for mass surveillance, a move that privacy groups like the ACLU hailed.