design ethics
Privacy zuckering
What is privacy zuckering?
Privacy zuckering tricks users into sharing more than they intend by defaulting settings to 'share', hiding private options behind confusing language and extra clicks. Named after a certain founder, it assumes consent without ever asking for it.
Also known as: default-on sharing, privacy dark pattern
Prefer to watch?
Watch the recap 0:35
The demo
A privacy panel for a new account. Switch the defaults and look at the tally before you change a single switch - because almost nobody ever does.
Look at what's shared by default before you touch anything.
What this demo shows (text version)
A privacy settings panel with five share toggles: public profile, share location, personalised ads, share activity with partners, and searchable by email. In "privacy zuckering" mode all five start switched on, so a new user is sharing everything before changing anything - and most people never change defaults.
In "honest defaults" mode the same five toggles start switched off, so nothing is shared until the user actively opts in. A tally shows how many are on. The controls are identical; only the starting state differs, and that default is what most users will live with - which is why defaulting to maximum sharing is a dark pattern, not a neutral choice.
Defaulting to 'share' and hiding privacy controls behind vague wording assumes consent that was never given - most people don’t change defaults, so most share everything. Default to privacy and make sharing an active opt-in.
With the zuckered defaults you were sharing all five things before you'd touched a thing - because nobody changes defaults, and these were all set to "on". Flip to honest defaults and you share nothing until you choose to. Same controls, opposite starting point - and the starting point is the whole game.
The lever is defaults plus inertia. Most people never open settings, so whatever you pre-tick is what billions effectively "choose". Defaulting to maximum sharing and hiding the off switch isn't a neutral default - it's a decision made on the user's behalf, against their interest, and dressed up as their choice.
The honest version defaults to private, asks before it shares, and makes the controls plain and findable. Privacy-by-default is now law in places for exactly this reason. My test: if your growth depends on people not finding the off switch, you don't have consent - you have a [dark pattern](/entries/dark-patterns/).