Privacy guide

What are dark patterns? The tricks that get your data.

Dark patterns explained: the design tricks Indian apps and sites use to push you into sharing data or consenting, how to spot them, and how to resist.

The simple answer

Dark patterns are design tricks that nudge you into choices you might not make freely, like accepting all cookies, sharing extra data, or struggling to find the cancel button.

They work by making the privacy-friendly choice harder than the data-hungry one. Once you can spot them, they lose much of their power.

What to check

1
Notice when Accept is easy but Reject is buried.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Watch for pre-ticked consent boxes.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Be alert to guilt-worded or confusing buttons.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Look for hard-to-find unsubscribe or delete options.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

The design is not neutral.

State of Privacy found consent and choice flows that looked simple but steered users toward sharing more. Dark patterns are exactly that steering, made deliberate.

What to do next

1
Slow down on consent screens and read the options.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Choose reject-all and uncheck pre-ticked boxes.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Report manipulative flows and prefer fairer services.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

What is a dark pattern?

It is a design trick that pushes you toward choices like over-sharing data or harder cancellation, against your interest.

Are dark patterns allowed?

Manipulative consent and design are increasingly scrutinised; regulators discourage them, though enforcement varies.

How do I avoid them?

Slow down, choose reject-all, uncheck pre-ticked boxes and watch for buried cancel or delete options.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience