Secrets of Privacy | Make Yourself a Harder Target@secretsofprivac
Mark Zuckerberg keeps telling lawmakers and jurors that Apple and Google should verify everyone's age at the operating system level.
➡️ He said it under oath last month in Los Angeles.
➡️ Meta, X, and Snap sent a joint letter to South Dakota legislators saying the same thing.
➡️ Meta's youth safety policy director has testified in multiple state hearings pushing this approach.
The framing is always about protecting kids. But look at what OS-level age verification actually builds.
First, it moves legal liability off Meta. Zuckerberg is facing 1,600+ lawsuits alleging Instagram harmed minors. If Apple and Google own age enforcement, Meta's lawyers get to point at Cupertino and Mountain View when enforcement fails.
Google's own director of government affairs called this out:
"fast-moving legislative proposals being pushed by Meta and other companies in an effort to offload their own responsibilities."
Second (and few people are talking about this) it gives Meta better data.
California's AB 1043 (effective Jan 2027) requires operating systems to sort every user into an age bracket at setup and expose that data to any app via real-time API. Colorado's SB26-051 does the same.
Right now Meta relies on self-reported birthdates for age data. Their own internal documents showed millions of underage users slipping through.
An OS-verified age signal, potentially backed by government ID or biometrics, gives Meta a high-confidence demographic data point for every user, on every device, delivered via API, at zero implementation cost to Meta.
They don't build the system. They don't store the IDs. They don't take the PR hit. They just read the signal and feed it into the ad targeting machine that generates $130B+ in annual revenue.
Meta gets identity infrastructure without the surveillance optics.
The IAPP noted that OS-level verification forces all users to unmask. Which overrides the possibility of anonymous interaction with the device itself. Every app that queries that API benefits.
So when Zuckerberg says age verification at the phone level is "just a lot cleaner," he's right. It's very clean.
For him.