Break up social media into far smaller segments with the segments required to provide api for competing services and for users to download their data.

Also, the data should be obscure to the company Facebook account should only be able to encrypted junk. My friends, then are given decryption keys.

Of course, there needs to be through data auditing requirements for any large store of data, just like we mandate external audits of any large publicly traded company