Meta's NameTag Face-Recognition Code Shipped to 50 Million Phones

When Wired reviewed the Meta AI companion app in June 2026, it found face-recognition code sitting on more than 50 million phones — distributed quietly since around January of that year, with no public announcement. The feature had a name inside the codebase: NameTag.

The system is built to work with Meta's Ray-Ban smart glasses. According to the reporting, NameTag uses three AI models to capture faces through the glasses camera, convert them into unique biometric signatures, store those signatures locally on the device, and compare them against a database that could receive updates from Meta's servers. The code also referenced a "Connections" menu with interface elements prompting users to "remember the people you met" — a phrase that makes plain what the feature is actually for: identifying strangers encountered in public while wearing the glasses.

The word "dormant" deserves scrutiny. Meta stated the feature was not enabled and was not sending biometric data to its servers. That is probably true as reported. But the infrastructure was already on 50 million devices, and activation could in principle come through a server-side configuration change rather than a new app update, bypassing app store review entirely. The gap between dormant and live is smaller than it looks when the code is already distributed at scale.

Meta stripped nearly all traces of NameTag from its latest app update within one day of Wired's report. The Electronic Frontier Foundation called it a victory, and provisionally it is. Public anonymity erodes when anyone with a pair of glasses can identify a stranger's face; women face heightened risks from stalkers; protesters lose plausible deniability. The speed of removal shows public pressure can move Meta.

What the reporting does not give you is whether the removal was global — including markets where GDPR already governs biometric data processing — whether a server-side flag could still activate remnants on existing devices, or what Meta's actual roadmap for NameTag looks like. Those are exactly the questions regulators in EU member states will likely press, and their answers will determine whether this episode ends as a privacy violation that was corrected or one that was simply paused.