"Hook, Hold, Harvest, Hide"

Meta spent years designing Instagram and Facebook to hook kids and keep them scrolling, then told parents its apps were safe. If you have a teenager, the pull of those apps is what you fight about at the dinner table, in the car, and outside their bedroom door at midnight. A coalition of states took the company to court in California this month, arguing it built those apps to be addictive on purpose and hid the harm from the public. The trial never finished. This week, Meta agreed to pay up to $17 billion to settle the case and make it go away.

Meta settled before a jury could decide, but the states had already spent the first days of trial laying out their case, and it was built on Meta’s own words. California’s Deputy Attorney General Megan O’Neill summed up the company’s business model in four words: ‘hook’ young users, ‘hold’ their attention as long as possible, ‘harvest’ their data, and ‘hide’ the truth from the public.

The documents were blunt. A 2016 internal email described the overall goal for Instagram in three words: teen time spent. A separate study, titled “Long Term Retention: The Young Ones Are The Best Ones,” looked at kids roughly 10 to 12 years old and found that the younger a child is when they first start using the apps, the longer they stay and the more money they generate for the company. Meta was studying how to hook children earlier, and writing it down.

The company also knew what its platforms were doing to those kids. In one internal survey from 2021, Meta asked teens ages 13 to 15 about a single week on its apps. In that week, 27% had witnessed bullying, 13% had received unwanted sexual advances, and 8.4% had seen content about self-harm. The states’ first witness, former Meta safety director turned whistleblower Arturo Béjar, told the court the company was fixated on user growth and that Instagram had changed from a product you use into a product that uses you.

Meta’s lawyers pushed back, arguing the research shows no clear link between using the apps and real harm, and pointing out that more teens in that same survey said the apps made them feel good than bad. But the states kept returning to the same machinery: the infinite scroll, the beauty filters, the like counts, the algorithm built to keep kids coming back, none of it an accident, all of it aimed at time on the app. Meta said in public that it put safety first. Inside the company, O’Neill argued, when safety and growth collided, “profits won.”

Meta settled for its own reasons, and a change of heart was not one of them. The company could see where the trial was heading. Fighting on meant weeks more of internal documents read aloud in open court, and it meant putting Meta CEO Mark Zuckerberg on the stand to answer for them. Settling was the cheaper, safer way out.

That choice matters for what stays hidden. For a week and a half, the trial had been turning into a public education about how Meta operates, one document at a time. The records already read in court stay public, but the evidence that had not yet surfaced mostly stays out of view now. A trial that runs its course keeps prying loose what a company would rather keep quiet. A settlement stops the prying.

That is the case Meta paid to escape. The changes it accepted in return are real, and they reach right into the ordinary shape of your kid’s day.

Users under 18 on Instagram and Facebook will get a default daily time limit of two hours. The apps will also nudge them to stop along the way, with a reminder after 15 minutes of steady scrolling and again at 60 and 90 minutes in a day. Their apps will go quiet overnight, roughly midnight to 6 a.m., and notifications will be muted at night and during school hours. The endless feed that never gives a kid a natural place to stop will be interrupted. The public tally of likes and reactions will disappear, so a 13-year-old is no longer staring at a scoreboard of their own worth. The cosmetic surgery filters that reshape a face into something thinner or smoother will be off-limits. And they will be able to choose a feed that is not run by the engagement algorithm, which means the app stops constantly studying them to serve up whatever keeps them scrolling.

Several of the strongest limits, the two-hour cap and the overnight shutoff, can be switched off by a parent. That single detail decides how much these protections are really worth. Leaving the choice with you respects your judgment as the adult. It also drops the job back on your own kitchen table, because the protection only works if you stay engaged and stand firm when your kid begs you to lift the cap. Age verification is still easy to get around, because plenty of kids simply lie about their birthday to slip past the under-13 rule in the first place.

Even with those caveats, this is a real win. For years, advocates argued that the fix parents actually needed was structural. Kids needed a change to how these products are built, something deeper than a safety brochure or a parental-control setting buried five menus deep. The features Meta agreed to change are the exact machinery the states spent the trial describing, and getting a company to dismantle its own growth engine is meaningful. It happened because sustained legal and public pressure finally made business as usual too expensive to defend.

A settlement is not a guilty verdict, though, and that is where the good news gets complicated. Meta admitted no wrongdoing, and the case ended before any judge ruled against the company. That leaves the thousands of families and school districts still suing without a court victory to build on. The clearest tell is the money. The headlines put the number at up to $17 billion, the total Meta will pay the states. Only about $12 billion of that is guaranteed, spread across 10 years, and the figure climbs higher only if TikTok and YouTube adopt the same measures. For a company that pulled in about $201 billion in revenue last year and sits on more than $90 billion in cash, a bill like this is survivable. Spread across the decade Meta has to pay, the money comes to less than 1% of what the company earns in a single year. Wall Street agreed. Meta’s stock jumped as much as 4% to 5% before the opening bell, then gave most of it back and drifted near flat once trading began. The relief was the point. Investors had braced for a verdict that could have run to hundreds of billions, even the $1.4 trillion the states floated early on, so a deal this size read as Meta buying its way out of the worst case. When the market shrugs at your historic penalty, the penalty was one you could comfortably afford.

Enforcement is now the whole game, and the trial showed exactly why. On the stand, the head of Instagram, Adam Mosseri, was asked about a feature called Take a Break, a pop-up that nudged teens to pause. Meta had publicly bragged that more than 90% of the teens who used it kept it turned on. What Meta left out was that hardly any teens ever turned it on. An internal document showed that at one point only about 1.8% of them had. Mosseri confirmed under oath that parents had no way of knowing that number, and that Meta never disclosed the number. That is the ‘hide’ in hook, hold, harvest, and hide. Build the safety feature, publicize the flattering number, bury the one that matters.

So the promises in this week’s press release are worth exactly as much as the follow-through. The deal does put some real enforcement in place. An independent auditor will get broad access to Meta’s information and can speak directly with the state attorneys general, and Meta is now barred from making false or misleading claims about its safety features. The changes are supposed to reach teen accounts within six months. Whether they are actually rolled out, is the question worth watching, and the promise worth holding Meta to.

One more piece of the deal deserves a hard look. The states alleged that Meta violated the federal Children's Online Privacy Protection Act by harvesting personal data from children under 13 without parental consent, the very kids it was never supposed to allow on the platform. That data, they said, went on to help train the artificial intelligence Meta is now betting its future on. A child too young to sign up legally still leaves a trail, data on what they watch, what they linger on, what makes them click, and that trail becomes raw material for the systems built to make Meta richer. The court never ruled on whether any of that happened, because settling let Meta close the question with no admission of wrongdoing. Meta denies the claim, and the allegation stands unproven. Still, a company that believed a jury would clear it does not usually pay billions to avoid the verdict.

A bipartisan group of state attorneys general just did what Congress has unwilling to do for decades. They stood up to Big Tech and made it blink. Meta is the first major platform to settle with the states, and the officials who negotiated this deal are openly saying the company will not be the last. Part of Meta’s payment is even tied to whether TikTok and YouTube follow. This whole wave of cases keeps drawing comparisons to the fight against Big Tobacco in the 1990s, which forced cigarette makers to change and reshaped how the public saw the product. The comparison holds. Governments around the world are moving the same way, with Australia barring social media for kids under 16, Europe working toward its own limits, and and Congress finally moving on the Kids Online Safety Act. The ground genuinely shifted this week.

The next few months are where all of this reaches your own family. When these changes land on your kid’s account, learn the new settings before your teenager does. Know which protections are on by default and which ones you control. Think hard before you switch any of them off, no matter how persuasive the argument at the dinner table. This settlement is a starting point. Meta will do the minimum it can get away with, because the people who build these apps did not suddenly grow a conscience. They were pushed into this, and staying informed is how you keep the pressure on. These changes will make social media safer for kids. They will not make it safe. That work stays where it has always been, in the courts, in the statehouses, in the schools, and in your own home.

The pull your kid feels is not going anywhere. For the first time in a long while, though, some of the design behind that pull is bending back toward your kid, and back toward you.

A note on process: This piece was researched, structured, and drafted using AI tools, then edited, fact-checked, and published with human oversight. Read my full disclosure & process policy here.

Stay informed on the tech stories that affect your everyday life. Subscribe to Safe Online Futures.