Could it be that the intermittent requests to servers by running apps, say Facebook Messenger or WhatsApp, be tracked as social media use? Because they all use HTTPS I don't see how the researchers distinguished between idle traffic vs sending a message.