Meta Smart Glasses Can Use Faceprint Tracking: What the Hidden Code Reveals About Your Privacy

Meta Smart Glasses and the Hidden Faceprint Feature No One Asked For

When Meta launched its Ray-Ban smart glasses in partnership with EssilorLuxottica, the company positioned the device as a stylish, AI-powered accessory for everyday life — something that could help you snap photos, listen to music, and interact with Meta AI on the go. What was not advertised, however, was buried deep inside the device's code: the infrastructure for faceprint tracking. Researchers and privacy advocates have now uncovered references to facial recognition capabilities within Meta's software, and the discovery is sending shockwaves through the digital rights community.

Even though the feature has not been enabled or publicly deployed, its mere existence in the codebase raises profound questions about where wearable AI technology is heading, who it serves, and at what cost to ordinary people walking down the street.

What Is Faceprint Tracking and Why Does It Matter?

A faceprint is a biometric identifier derived from the unique geometric structure of a person's face. Much like a fingerprint, it is virtually impossible to change, making it one of the most sensitive categories of personal data that can be collected. Facial recognition systems use faceprints to identify or verify individuals in real time, matching a scanned face against a database of stored profiles.

Unlike a password or a PIN, a faceprint cannot be reset if it is compromised. Once your biometric data is collected, stored, or leaked, the damage is permanent. This is precisely why privacy laws in states like Illinois, Texas, and Washington — and in countries across the European Union — impose strict regulations on the collection and use of facial recognition data. The stakes are not abstract. They are deeply personal.

What the Code Actually Reveals

Developers and security researchers who examined Meta's software found explicit references to functionality that would allow the smart glasses to identify individuals using facial recognition technology. The code suggests that the glasses could, in principle, scan a person's face in the physical world and cross-reference it with a broader identity database — potentially one tied to Meta's vast social media ecosystem, which includes Facebook and Instagram profiles for billions of users worldwide.

Meta has not confirmed whether or how this feature would ultimately be deployed. A company spokesperson noted that the capability is not currently active. However, privacy experts argue that the presence of this code is itself alarming. Features that exist in software often get activated — sometimes with minimal public notice, sometimes buried in a terms-of-service update that few users ever read.

The Broader Surveillance Concern With Wearable AI

Smart glasses present a surveillance risk that is categorically different from, say, a smartphone with a camera. When you hold up a phone to take a photo, people around you typically notice. The act is visible and deliberate. But wearable cameras — embedded in what looks like ordinary eyewear — can record and potentially identify people in real time without any visible indication that surveillance is occurring.

This creates what privacy researchers call an "ambient surveillance" problem. Imagine a future in which anyone wearing a pair of connected glasses could, with a glance, identify every person they encounter, pull up their social media profiles, their employer, their home address, or their political affiliations. That future is not science fiction. The technology to enable it already exists, and Meta's code suggests the company has at least explored building it into a consumer product.

Harvard Students Already Demonstrated the Risk

The concern is not purely theoretical. In late 2024, two Harvard students made international headlines when they demonstrated a project called I-XRAY, which combined Ray-Ban Meta smart glasses with publicly available facial recognition tools to identify strangers on the street in real time. Their experiment showed that it was possible to look at a person through the glasses, run their face through a recognition engine, and retrieve their name, address, and other personal details within seconds. The students built the project to sound an alarm — and it worked. The viral demonstration underscored just how thin the line is between current capability and mass deployment.

Meta's Track Record on Privacy

Meta's history with user data does not inspire confidence. The company has faced billions of dollars in fines and settlements over privacy violations spanning more than a decade. In 2022, Meta paid $650 million to settle a class-action lawsuit in Illinois over its use of facial recognition in the Facebook photo-tagging feature — a feature the company eventually shut down following mounting regulatory and public pressure. The company has also faced scrutiny from the Federal Trade Commission, the European Data Protection Board, and privacy regulators in multiple countries.

Given this history, the discovery of faceprint-related code in Meta's wearable device is not something that can be brushed aside with a "the feature isn't live yet" reassurance. Trust, once eroded repeatedly, requires more than corporate statements to rebuild.

What Regulators and Advocates Are Saying

Digital rights organizations including the Electronic Frontier Foundation (EFF) and Access Now have called on regulators to investigate and, where necessary, preemptively prohibit the activation of facial recognition features in consumer wearables without explicit, informed consent from users and bystanders alike. The key challenge is that current privacy law in the United States is fragmented. There is no comprehensive federal biometric privacy statute, leaving protection largely dependent on which state a person happens to live in.

In the European Union, the AI Act and the General Data Protection Regulation (GDPR) provide stronger guardrails, with real-time biometric identification in public spaces largely prohibited except in narrow circumstances. But enforcement is slow, and technology companies often move faster than regulators can respond.

What You Can Do Right Now

• Stay informed: Follow updates from digital rights organizations that monitor tech company practices and privacy legislation closely.
• Review your privacy settings: On all Meta platforms, regularly audit what data you have consented to share and with which third parties.
• Advocate for federal biometric privacy law: Contact your elected representatives and support legislation that would establish a national standard for biometric data protection in the United States.
• Think critically about wearable AI adoption: Before purchasing or recommending AI-powered wearables, consider what data they might collect, from you and from everyone around you.

The Larger Question We All Need to Answer

The revelation of faceprint tracking code in Meta's smart glasses is a symptom of a larger, unresolved tension at the heart of consumer technology: the gap between what a device is sold as and what it is technically capable of becoming. Every new generation of connected hardware ships with capabilities that exceed what is immediately deployed, and the decisions about which of those capabilities get switched on are made not by users, but by corporations chasing engagement, advertising revenue, and competitive advantage.

Faceprint tracking on wearables is not an inevitability. It is a choice — one that regulators, consumers, and civil society still have the power to shape. But that window of influence narrows every time a new product ships with surveillance infrastructure already baked in, waiting for the moment someone decides to flip the switch.