Currently we count users as pubkeys that have some metadata (profile settings) set and follow at least one other pubkey. A fairly low bar atm; I am sure we are catching some bots in there as well. This logic will get more sophisticated in the future.