Pawel Szydlowski, a 30-year-old Polish developer, bought multiple models of smart glasses out of pocket, recorded their Bluetooth broadcast signatures, and built a detection app called ZuckOff. The app matches Bluetooth manufacturer identifiers against a fingerprint database covering Ray-Ban Meta, Oakley Meta, and Snap Spectacles. It is free on iPhone for basic scanning, with a paid Pro tier for background monitoring and alerts. Over 6,000 people downloaded it in its first month across both app stores. The app exists because Meta's smart glasses have a growing unsolicited-recording problem. A BBC investigation in January found dozens of accounts posting content filmed covertly with Meta glasses, including one that published a 21-year-old woman's face and phone number to an audience of 1.3 million views. The recording indicator LED — designed to signal bystanders — is trivially defeated with a piece of tape. Schools and cinemas are increasingly banning the devices outright. Meta announced in July that a software update would detect when the LED has been physically tampered with and disable the camera. CTO Andrew Bosworth stated the camera was "designed to be noticed by the people around you." This claim sits awkwardly alongside the product's core commercial proposition: that the camera doesn't look like a camera. Roughly seven million pairs of Meta smart glasses were sold in 2025, making bystander exposure a mass-scale issue, not a niche concern. ZuckOff cannot tell you whether nearby glasses are actively recording, nor can it identify who is wearing them. It reads Bluetooth signal strength to estimate proximity — a partial solution to a systemic problem. But the app occupies a legally durable position: it reads signals that are broadcast publicly and intercepts nothing. Meta has no obvious legal mechanism to shut it down, and the underlying hardware fingerprinting technique is straightforward to replicate. The structural dynamic here is clear. Meta ships seven million always-on cameras into public spaces, externalizing surveillance costs onto every bystander. A single developer with a few hundred dollars in hardware builds the only countermeasure available to civilians. The asymmetry is staggering: a $299 product backed by a trillion-dollar company, countered by a free app from one person in Poland. Legislation has not caught up. Venue-level bans are piecemeal. The LED tamper-detection update is a concession that arrives years after the problem was identified. The ZuckOff Pro subscription model — background monitoring, alerts, sighting history, CSV export — signals that bystander counter-surveillance is becoming a product category. This is a market that exists only because a dominant platform externalized a cost it chose not to internalize. The fact that a cottage industry of detection tools is emerging around Meta's hardware is itself an indictment of the regulatory vacuum. What matters over 20 years is whether the burden of managing ambient surveillance stays with bystanders or shifts to the companies deploying always-on cameras. Right now, the answer is bystanders — one free app at a time.
