If dropbox get to send metadata about files outside of the folder could be damning enough.

Hey you have in your downloads folder 3 new files per day whose file names hints they were send by FB user X. I could make an educated guess about their content.