In 2013, Facebook quietly acquired Onavo, an Israeli analytics company that operated a free VPN app called Onavo Protect. Marketed as a tool to help users monitor data usage and protect their privacy, the app actually served a very different purpose: it routed all of a user's mobile internet traffic through Facebook's servers, giving the company unprecedented visibility into which apps people were using, how often, and for how long. This data became a powerful competitive intelligence tool that informed some of Facebook's most consequential business decisions.
The intelligence gathered through Onavo was remarkably detailed. Because the VPN intercepted all mobile traffic, Facebook could see not just which apps users opened but how they interacted with those apps — what features they used, how much time they spent, and how usage patterns changed over time. This gave Facebook a real-time dashboard of the entire mobile app ecosystem, revealing which competitors were growing, which features were gaining traction, and where potential threats to Facebook's dominance were emerging.
Internal documents revealed during antitrust proceedings showed that Onavo data directly informed Facebook's $19 billion acquisition of WhatsApp in 2014. The data showed WhatsApp's explosive growth trajectory and the degree to which it was becoming users' primary messaging platform — information that helped Facebook justify paying what seemed at the time like an astronomical price. Onavo data also reportedly influenced Facebook's decision to develop features that mimicked popular competitors, most notably the creation of Instagram Stories as a direct response to Snapchat's growth.
Apple removed Onavo Protect from the App Store in August 2018 after an investigation determined that the app violated Apple's guidelines on data collection. Apple found that Onavo was collecting data about users' app usage and selling it to third parties — specifically Facebook — in a manner inconsistent with the stated purpose of the app. Facebook subsequently shut down Onavo Protect, but the damage to user trust and competitive markets had already been done.
The Onavo controversy also revealed a related program called Facebook Research, which paid teenagers and adults between the ages of 13 and 35 up to $20 per month to install a "research" app that gave Facebook near-total access to their phone activity. This program, exposed by TechCrunch in 2019, used enterprise developer certificates to bypass Apple's App Store review process — a violation of Apple's developer agreement that prompted Apple to briefly revoke Facebook's enterprise certificates, temporarily disabling all of Facebook's internal iOS apps.
For consumers, the Onavo episode illustrates a recurring pattern in Meta's approach to data: offering free services that serve primarily as data collection instruments. When a product is free, the user is often the product. VPN services, which users adopt specifically to protect their privacy, represent a particularly cynical vector for surveillance. The lesson is that free privacy tools from companies whose business model depends on data collection should be treated with extreme skepticism.
The State of Big Tech Regulation in 2026
The relationship between Big Tech companies and regulators has entered a new phase of intensity. The Department of Justice's landmark antitrust case against Google resulted in a federal judge finding that Google maintained an illegal monopoly in search, marking the most significant antitrust ruling against a technology company since the Microsoft case of the early 2000s. The remedy phase of the case could reshape how hundreds of millions of users access information online and how billions of dollars in advertising revenue are distributed across the digital economy.
The European Union's Digital Markets Act (DMA) has imposed unprecedented obligations on designated gatekeepers including Apple, Google, Meta, Amazon, and Microsoft. These obligations include requirements for interoperability, data portability, and restrictions on self-preferencing that directly affect the business models that have driven Big Tech growth. Enforcement actions under the DMA carry potential fines of up to 10 percent of global annual revenue, creating meaningful financial incentives for compliance. The practical implementation of these rules continues to generate disputes about scope, methodology, and the adequacy of company compliance plans.
In the United States, bipartisan momentum for technology regulation has produced several legislative proposals addressing issues from data privacy to algorithmic accountability. The American Innovation and Choice Online Act, the KIDS Online Safety Act, and various state-level privacy laws reflect growing political consensus that the technology industry requires more oversight. However, disagreements about regulatory approach, enforcement mechanisms, and the potential for unintended consequences on innovation continue to complicate legislative progress. This context of regulatory scrutiny directly affects onavo: how meta used a "free vpn" to spy on competitors and users alike and similar corporate practices across the technology sector.
Market Dynamics and Consumer Impact
Big Tech companies collectively command market capitalizations exceeding 12 trillion dollars, giving them extraordinary influence over the digital infrastructure that modern life depends upon. The network effects, data advantages, and switching costs that characterize platform businesses create durable competitive moats that make it exceptionally difficult for new entrants to challenge incumbent positions. When these companies make decisions about product design, pricing, data practices, or content moderation, the effects ripple across billions of users worldwide.
Consumer advocacy organizations have documented a pattern of practices across major technology platforms that critics characterize as anti-competitive and harmful to users. These include dark patterns in user interface design that manipulate consumer choices, bundling strategies that leverage dominance in one market to gain advantage in adjacent markets, and data collection practices that exceed what users understand or consent to. The Federal Trade Commission has pursued enforcement actions against several major platforms, though the pace of technological change often outstrips regulatory response capabilities.
The advertising-driven business model that sustains many Big Tech services creates structural incentives that may conflict with user interests. When a company's primary customers are advertisers rather than users, product design decisions naturally prioritize engagement metrics over user well-being. This dynamic has been implicated in concerns ranging from social media addiction to the spread of misinformation, and it provides essential context for understanding the specific corporate practices examined in this investigation.
The Innovation vs. Exploitation Tension
Big Tech companies operate in a perpetual tension between genuine innovation that creates value for users and extraction strategies that capture value from users. The same platforms that provide unprecedented access to information, communication, and commerce also employ sophisticated techniques to maximize engagement, data collection, and revenue in ways that may not align with user interests. Understanding this duality is essential for evaluating specific practices like onavo: how meta used a "free vpn" to spy on competitors and users alike — not every corporate action is exploitative, but neither is every practice user-serving simply because it comes from a company that also provides valuable services.
The concept of surveillance capitalism, articulated by Shoshana Zuboff and other scholars, provides a framework for understanding how data collection has become a primary source of competitive advantage and revenue for technology platforms. Under this model, user data is not merely a byproduct of service delivery but a raw material that is refined into behavioral predictions and sold to advertisers and other business customers. This dynamic creates structural incentives to collect more data, retain it longer, and resist transparency measures that might allow users to understand and control how their information is used. Regulatory responses including the GDPR, CCPA, and proposed federal privacy legislation attempt to rebalance these dynamics, but enforcement challenges and corporate compliance strategies often limit their practical impact.
Platform power also manifests in the ability to set terms for entire ecosystems of third-party developers, content creators, and merchants. App store policies, algorithmic content distribution, marketplace seller requirements, and API access terms all represent exercises of private governance power that affect millions of businesses and billions of users. When platforms change these terms — as they frequently do — the affected parties often have limited alternatives and minimal recourse. This dependency dynamic deserves attention regardless of whether specific term changes are individually reasonable, because the aggregate effect is a concentration of decision-making power that lacks the accountability mechanisms associated with public governance.
Constructive Engagement and Informed Choices
Navigating the Big Tech landscape as an informed consumer involves recognizing both the genuine value these platforms provide and the costs — monetary, privacy-related, and societal — they impose. Practical strategies include regularly auditing your data sharing and privacy settings across major platforms, evaluating whether the services you use provide sufficient value to justify their costs, exploring alternative services where viable options exist, and supporting regulatory and competitive initiatives that promote accountability and choice.
For technology professionals, the ethical dimensions of working within Big Tech organizations deserve ongoing reflection. Individual contributors and managers make daily decisions about feature design, data handling, content moderation, and algorithmic optimization that collectively shape the user experience for billions of people. Internal advocacy for user-serving practices, participation in ethics review processes, and willingness to raise concerns about problematic practices are all meaningful contributions to corporate accountability, even when they do not always produce immediate changes. The technology industry's culture and practices are ultimately shaped by the values and actions of the people who build and maintain its products.
