Meta Slipped Face-Scanning Code Onto Your Phone: and Forgot to Mention It

Your phone may already be carrying code that can recognize human faces. You didn't install it on purpose. You didn't get a notice. And for months, the company that put it there didn't say a word.

According to reporting from Wired, that company is Meta

According to reporting from Wired, that company is Meta. If you downloaded the Meta A.I. app, and more than fifty million people did, this story is about you. Wired investigators found that Meta slipped unreleased facial recognition code into the app back in January. The code was named "NameTag." It sat there, dormant, no button to press, no feature to use, but the machinery to identify a face by scanning it was sitting on your device. So why didn't anyone tell you?

Let's start with the timeline, because it's the heart of this. The code arrived on phones around January. But as late as April, Meta was publicly saying it was still deciding whether to add face recognition to its smart glasses. The company promised a careful rollout. Meanwhile, working code had already shipped, months earlier, to fifty million phones. That gap between what a company does and what it tells you? That's the real story here. For you, it means the apps on your phone can hold capabilities you'll never see in the settings menu.

Now, this isn't Meta's first run-in with face technology and the law. In 2019, the company settled a federal investigation over confusing face recognition settings, a five billion dollar settlement. In 2021, it paid out hundreds of millions under an Illinois biometric privacy law. Then in 2024, Meta agreed to pay over a billion dollars to settle facial recognition claims in Texas. That's a long, expensive history. And the code still ended up on your phone without notice.

There's a clever piece of engineering behind this, and it's the part you should understand. The system was built to match faces directly on your phone, instead of sending every face up to a central server. That sounds more private, and in some ways it is. But it also lets Meta say something specific: we're not keeping a giant database of faces. Technically true. The recognition just happens in your pocket instead. For investigators weighing facial comparison tools, that distinction matters. For everyone else, it means "we don't store your face" and "we can recognize your face" can both be true at the same time.