Every case study here so far has been one of my own products. This is the first that isn't. It started when Facebook hid a reply of mine and never told me why, which I wrote about in When a Platform Hides the Civil Reply.
Meta runs Facebook, Instagram, Threads and WhatsApp. Billions of people use them for free, and Meta earns most of its money selling advertisers access to their attention. It has three kinds of people to answer to: the people who use the apps, the advertisers who pay, and the shareholders who own it. I checked each test against them, mostly the first.
I can't read Meta's code, so this is built from what anyone can check: its help pages, its filings with the Securities and Exchange Commission, its own transparency pages and news reporting. Where a fact comes from reporting rather than from Meta itself, I've said so. I haven't run Meta's export or deletion tools myself for this review.
Test 1: Leaving is easy
A customer can export everything they put in, in a format another tool can read, without asking anyone.
Mostly passes. Facebook's Download Your Information tool lets anyone export their posts, photos, videos, messages and other activity as HTML or JSON, without asking anyone. JSON is a format other tools can read. Deleting an account is self-serve too, with a 30-day window to change your mind. Facebook's help page says it can take up to 90 days to delete everything you posted, and that copies may stay in backup storage after that for disaster recovery.
The part you can't take with you is the reason most people stay: the people. Your posts leave with you, but the friends, the groups and the conversations stay on Facebook. An export can't fix that, and it's the honest reason leaving is harder than this test measures.
Test 2: Pricing is legible
The price page says what one unit costs and what a unit is.
Not met for most people. For nearly everyone, Facebook has no price page because it has no price. The cost is attention and data, and no page says how much of either one person pays. Advertisers don't get a rate card either. Ads are sold by auction, so the price of reaching someone changes with demand.
The one exception shows what a legible price would look like. In the European Union, Meta offers a subscription with no ads, launched in October 2023 in response to EU law. Since November 13, 2024, it has cost €5.99 a month on the web and €7.99 on phones, after a 40% cut (reporting). That's a real answer to "what does this cost me?", and most of the world's users never see one.
Test 3: Privacy is the default
There's a public list of every piece of data the product collects, and why.
The list exists. The default is not privacy. Meta publishes a long privacy policy that lists the kinds of information it collects and what it uses each one for. That's more than many companies do, and it passes the letter of this test.
But the test is called privacy by default, and Meta's default runs the other way. Ads are personalized by default, and what Meta knows about you includes activity on other companies' sites and apps, sent back through the tracking code those businesses install. In May 2023, Ireland's regulator fined Meta €1.2 billion for how it moved European users' data to the United States, the largest fine under Europe's data protection law at the time.
Test 4: Accountability is independent
The party being judged doesn't hold sole control of the evidence it's judged by.
This is where my own experience sits, and it's the weakest of the five.
Not met. When Facebook hid my reply, the only record of why was Meta's. It showed me a label and no reason. Whoever made that decision, a person or a system, I had nothing to check it against.
Meta's answer to this test is the Oversight Board, an outside panel that reviews moderation decisions. Its rulings on individual cases bind Meta. Its policy recommendations don't. Meta commits only to respond to each one publicly within 60 days. And the board is paid for by Meta, through a trust. In May 2026, Meta extended its funding through 2028. Reuters reported the board saying it had secured $13 million more (Yahoo Finance), though other outlets reported the amount wasn't disclosed. A referee who depends on one player for the next contract is not independent of that player, however honest the referee is.
Law has started to fill the gap, but only in some places. Under Europe's Digital Services Act, a platform that restricts someone's content has to give that person a specific statement of reasons, and a German court has held that quietly limiting a post counts. In April 2025, a German civil rights group filed a complaint with Ireland's regulator alleging Meta systematically fails to give those reasons (GFF). I'm in Arizona, where no law requires Facebook to tell me anything.
There's also Meta's own stated goal. In January 2025, Mark Zuckerberg announced Meta would end third-party fact-checking in the United States, replace it with Community Notes, and point its automated systems at "high severity violations," because the old approach made "too many mistakes" (reporting). A thank-you note in a religious discussion is not a high-severity violation. If it was a mistake, it's the kind Meta said it would make fewer of, and nobody outside Meta can count them.
Test 5: The principles live in the structure
A future owner can't quietly remove them. The charter holds them, not the founder's good intentions.
Not met, and the structure points the other way. Meta has two classes of shares. Class B carries ten votes per share, and Mark Zuckerberg holds nearly all of it. As of October 1, 2026, he held about 60.6% of the total voting power, according to Meta's own filing. Whatever principles Meta has, one person can change them.
That filing shows how far this reaches. On October 20, 2026, entities holding about 56.1% of the voting power, all tied to Zuckerberg, approved by written consent a new Class C stock with no vote at all, and a dividend of one Class C share for every existing share. The company's stated purpose is to raise money, pay employees and make acquisitions without diluting the voting power of existing holders. It takes effect January 19, 2027. No other shareholder voted on it, because none needed to (SEC information statement). Earlier that year, at the May annual meeting, a shareholder proposal on the two-class structure failed with about 26% of the votes cast (8-K).
None of that is hidden, and it's all legal. It means the test can't be met. At Meta, the charter and the founder's intentions are the same thing.
Where that leaves it
- Test 1, leaving: mostly passes. Your data leaves with you, but your people stay.
- Test 2, pricing: not met, except in the EU, where a no-ads price exists because the law pushed for one.
- Test 3, privacy: the list exists, the default is not privacy.
- Test 4, accountability: not met. Meta funds its own referee, and in most of the world it doesn't have to explain a moderation decision to the person it affects.
- Test 5, structure: not met. One person holds the vote, and a new class of stock keeps it that way.
What would change these:
- Anyone whose content is hidden, limited or removed gets the four answers Europe already requires: what happened, why, who can still see it, and how to ask for another look. Everywhere, not only where the law demands it.
- The Oversight Board gets funding Meta can't withhold, on terms set years ahead, and its recommendations get a deadline for doing something, not only for answering.
- The EU's no-ads price is offered everywhere, so everyone can see what the free version costs them.
- Privacy-protecting settings are the default, and personalization is something you turn on.
- Any principle Meta wants people to rely on is written into the charter in a form one shareholder can't remove alone.
I don't expect Meta to read this. But the tests are the same ones I hold my own products to, and if a company this size can pass some of them, so can a small one. If you work at Meta and something here is wrong, write to me and I'll correct it here.