Armed with nothing more than a Facebook user’s phone number and home address.