User Autonomy

On April 21, 2026, Rideshare Drivers United (~20,000 members) filed lawsuit in San Francisco Superior Court alleging Uber violated California's Proposition 22 by failing to provide adequate appeals for driver deactivations. Named drivers include Devins Baker (8-year driver, deactivated for hard braking to avoid a pedestrian, received only 'copy and paste responses') and Mirwais Noory (father of four, forced to relocate family after deactivation). Documented problems include bot-based initial contact, offshore call centers working from scripts, no transparency about which passenger complained, and decisions appearing predetermined.

A Delaware judge ruled in early March 2026 that Hartford, Chubb, and more than 20 other insurers do not have a duty to defend Meta in thousands of lawsuits alleging its platforms harm children. The court found that harm from deliberate design choices (addictive features, algorithmic amplification) does not qualify as 'accidents' under insurance policies. This ruling represents a significant financial blow to Meta, which faces thousands of pending addiction and child safety lawsuits.

Anthropic implemented strict technical safeguards preventing third-party applications from using Claude subscriptions, blocking OpenCode (56k GitHub stars), xAI employees via Cursor, and anyone using subscription OAuth outside Claude Code. Critics called it 'very customer hostile.'

In late 2025, Jensen Huang opposed the bipartisan Guaranteeing Access and Innovation for National Artificial Intelligence (GAIN AI) Act, which would have required chipmakers to give U.S. companies first pick of chips before selling to China or foreign adversaries. The act passed the Senate in October as part of the annual Defense bill but reportedly faced resistance from the Trump White House after Huang's lobbying. Senator Warren stated Huang was 'sneaking in to meet with Senate Republicans behind closed doors as he kills the bipartisan GAIN AI Act.' Huang also advocated for federal AI regulation to preempt state laws protecting children, renters, and workers.

Anthropic reversed privacy stance, shifting from not using consumer conversations for training to opt-out model. Extended data retention to 5 years (from 30 days - 6,000% increase). Pop-up presented 'Accept' button prominently with opt-out toggle set to 'On' by default in smaller print. Mandatory deadline (Sept 28, later extended to Oct 8) forced immediate decisions.

In December 2024, India's Central Consumer Protection Authority fined Zepto ₹7 lakh for deploying dark patterns. The CCPA found Zepto's checkout-stage pricing caused consumers to pay more than MRP through hidden packaging charges. Zepto also added paid Zepto Pass membership to carts by default without explicit consent (basket sneaking) and used 'confirm shaming' by displaying 'No, I don't want to save' when users declined. CEO Aadit Palicha acknowledged the mistake publicly.

Plaid publicly endorsed and helped shape the US Consumer Financial Protection Bureau's October 2024 finalised Section 1033 rule under the Dodd-Frank Act, which requires banks to allow consumers to share their financial data with third-party fintech services on demand and free of charge. Plaid's lobbying and amicus participation supported a positive consumer-protection outcome despite the rule's competitive implications for incumbent banks. The rule was a major win for open-banking advocates and consumer data portability.

Notion's revised AI policies published in 2024 committed by default to not using customer workspace content for foundation-model training, requiring explicit per-workspace opt-in for any training-data sharing. The policy contrasted with default-on AI integration approaches taken by Dropbox, Slack and others in the same period and was praised by privacy advocates including the EFF.

In 2024, Slack faced significant backlash after users discovered the company's policy of using customer messages and interactions to train its AI/ML models. Critics argued Slack had not adequately informed users about this data usage. The policy required workspace administrators to opt out by contacting Slack directly, rather than providing a simple user-facing toggle, drawing comparisons to other companies' controversial AI training practices.

In April 2024 Discord rolled out updated default safety settings for accounts identified as belonging to users aged 13-17, including default-on Sensitive Content filters for DMs, restrictions on receiving messages from unknown adults, and reduced visibility in friend recommendations. The changes followed years of criticism by NCMEC, Thorn and child-safety researchers documenting Discord's role in grooming cases and the Stanford Internet Observatory's 2023 finding that Discord underreported CSAM relative to platform scale. The updates remained criticised as reactive rather than preventive but represented a material default-state improvement.

In February 2024, a class action alleged Match Group apps use 'dopamine-manipulating' features prioritizing engagement over successful relationships. Research found dating app users had 2.51x higher psychological distress and 1.91x higher depression. The lawsuit cited algorithms that stagger matches using intermittent variable reinforcement (slot machine mechanics), ELO desirability scores giving top 10-20% of users ~50% of matches, and shadow banning without notification.

In January 2024 Robinhood agreed to pay $7.5 million to settle a Massachusetts Securities Division complaint over gamification techniques and aggressive customer-acquisition practices that, the state alleged, encouraged inexperienced retail investors to take risks they did not understand during the January 2021 meme-stock episode. The settlement was separate from but related to the prior $70M FINRA action and reaffirmed the platform's responsibility for the trading restrictions and customer-experience failures of that period.

In December 2023 security researchers and Dropbox users discovered the company had silently enabled by default a 'third-party AI' setting in user account settings that, while Dropbox said did not permit OpenAI to train on customer files, indicated user content could be sent to OpenAI for the company's AI features. The backlash forced Dropbox to publish a clarifying blog post by CEO Drew Houston and pause the setting's default-on rollout. Critics argued the episode showed how easily 'AI features' opt-in toggles can erode user trust around training-data use.

The FSF's Defective by Design campaign continued its longstanding fight against Digital Restrictions Management (DRM) through annual International Day Against DRM events from 2020-2023, targeting streaming services (2020), Disney+ (2021), digital sharing restrictions (2022), and DRM in public libraries via OverDrive and Follett Destiny (2023). The FSF also successfully pushed for new DMCA anticircumvention exemptions in 2021, helping secure legal protections for users who need to bypass DRM for ethical and legitimate purposes. The campaign frames DRM as a threat to innovation, privacy, and user freedom.

Substack has consistently maintained a 10% subscription-fee revenue model with no ad-targeting or behavioural ad systems, preserving direct creator-to-subscriber relationships and email portability. The model has been credited by writers including journalists transitioning out of traditional media with restoring viable independent reporting economics, while critics including The Atlantic argue the model concentrates writer compensation at the top. Substack publicly rejected ad-supported pivots throughout 2022-2025 funding rounds despite VC pressure.

During the June 2023 API pricing protests, when approximately 8,500 subreddits went private or restricted, some communities labeled themselves NSFW in continued protest. Reddit administrators responded by removing entire moderation teams from protesting subreddits, citing violations of the Moderator Code of Conduct. CEO Steve Huffman dismissed the protest, saying 'It's a small group that's very upset' and telling employees internally that the protest 'will pass.'

On April 18, 2023, Reddit announced it would charge for API access at rates that would cost major third-party app Apollo $20 million annually, forcing it to shut down on June 30, 2023. Despite 8,500+ subreddits going private in protest (June 12-14) and accessibility concerns from r/Blind moderators, CEO Steve Huffman refused to negotiate or revise pricing. The rapid 30-day implementation timeline was criticized compared to industry standards. Third-party apps were widely used by moderators for organization, spam blocking, harassment detection, and by disabled users for accessibility. The change prioritized Reddit's IPO preparation over community welfare and platform accessibility.

In a TED talk titled 'How to Make Learning as Addictive as Social Media,' CEO Luis von Ahn stated: 'What we've done is we've used the same psychological techniques that apps like Instagram, TikTok, or mobile games use to keep people engaged.' Documented dark patterns include streak systems exploiting loss aversion, guilt-based notifications ('Your streak is in danger!'), hearts systems requiring payment after mistakes, and a Brazil campaign using drones to project notifications on buildings near lapsed users' homes.

In November 2022, Google agreed to pay $391.5 million to settle with 40 US state attorneys general over allegations that the company tracked users' locations even after they believed they had turned off location tracking. The investigation found Google used dark patterns and confusing account settings to continue collecting location data. This was the largest multi-state attorney general privacy settlement in US history at the time.

In October 2022, PayPal updated its acceptable use policy to include a $2,500 fine for users who spread 'misinformation' as determined at PayPal's sole discretion. The policy caused immediate backlash from users and former PayPal president David Marcus, who called it antithetical to his beliefs. PayPal's stock dropped over 5%. The company retracted the policy within days, claiming the language was inserted 'in error'.