Meta Platforms faces a significant setback in its effort to dismiss claims that it violated consumer protection laws by illegally tracking Android users' browsing activity. A federal judge refused to dismiss the majority of allegations that Meta exploited Android system vulnerabilities to link user browsing data directly to Meta accounts, enabling hyper-targeted advertising profiles.
The plaintiffs, a class of Android users, contend Meta harvested their web browsing information without informed consent by circumventing Android's privacy safeguards. Android's design typically restricts apps from accessing certain user data; Meta allegedly exploited technical gaps in this protection to establish connections between offline browsing behavior and user accounts.
The lawsuit targets Meta's data collection practices across multiple platforms and devices. Android users claim Meta created advertising profiles based on their web activity across third-party websites and applications, then used this data to deliver targeted ads. This tracking occurred without explicit user permission and despite Android privacy settings designed to prevent such data gathering.
The judge's refusal to grant Meta's motion to dismiss preserves the bulk of the claims for trial. This ruling allows the litigation to proceed on allegations including violations of state consumer protection statutes, unjust enrichment, and breach of implied contract. Meta may face significant liability if plaintiffs prove the company knowingly exploited Android vulnerabilities.
The decision carries broad implications for tech companies and data brokers. It reinforces judicial skepticism toward claims that technical complexity justifies unilateral data collection practices. Companies collecting user data face heightened scrutiny when they work around operating system privacy protections, particularly when users lack meaningful opportunity to consent.
Meta continues to challenge certain narrow aspects of the claims, but the court's decision establishes that Android users have viable legal theories for pursuing damages. This case reflects growing litigation over tech companies' data collection practices and the adequacy of privacy disclosures provided to consumers using Android devices.