In 2003 the Pentagon asked scientists to build a machine that would record a human life — every call, email, purchase, step and conversation — and work out the person’s habits and relationships from it. The public recoiled and the program vanished. The news broke on the very day a Harvard sophomore launched a website where people would record their lives voluntarily. Was it the same machine wearing a hoodie? We went to the documents.
This file starts with an internet legend: the Pentagon killed its LifeLog project on 4 February 2004, the same day Facebook launched, because Facebook was LifeLog. It is one of the most-shared “coincidences” in tech history, and it deserves a proper check rather than a shrug or a meme.
Everything below comes from the record: DARPA’s own solicitation notice, the reporter who broke the cancellation, the Harvard Crimson, Meta’s filings, the Snowden archive, the Australian Information Commissioner, the WA Auditor-General and the Finance Minister’s own media releases. Where we infer, we say so.
The through-line: the record does not show that Facebook was LifeLog. It shows something more uncomfortable. The government didn’t need to build the machine. We built it ourselves, carried it in our pockets, and the state learned to borrow from it — in Washington with PRISM, and in Perth with a QR check-in app. Now Australia is building the identity layer that sits on top.
The idea for this file arrived with five claims attached. Before building anything we ran each one against the primary record.
| Wrong | “LifeLog was run by the CIA.” It was a Pentagon program, run by DARPA’s Information Processing Technology Office under program manager Dr Douglas Gage.1 The CIA does enter the story — later, through investors (Section 04). |
| Sharpen | “It stopped the same day Facebook started.” Thefacebook.com did go live on Wednesday 4 February 2004.4 But the reporter who broke the story wrote that day that LifeLog had been dropped “late last month.”2 The announcement shares Facebook’s birthday; the decision came days earlier. |
| Sharpen | “They are the same thing.” No evidence for that. LifeLog never funded a contract, and a public-radio investigation found no evidence DARPA or the intelligence services had a role in creating Facebook.56 What converged was the function — and that is the real story. |
| Holds | “LifeLog’s wearables tracking meetings between people — our phones now do that by Bluetooth, and Australia did it in COVID.” Correct in substance. LifeLog asked how separate recorders should share data about the same encounter;1 COVIDSafe used phones’ Bluetooth to log close contacts between users.20 |
| Wrong | “The COVID app is now called myID.” They are different apps with different owners. COVIDSafe (Health Department) was switched off and its data ordered deleted in August 2022.19 myID began life as myGovID, an ATO identity app released in 2019 — before COVID — and was renamed in November 2024.2324 The fair version is stronger anyway: a contact-logging app and an identity app arrived in the same five-year window, and only the identity app is still growing (Section 06). |
On 7 May 2003, DARPA posted solicitation BAA 03-30 on the federal contracts board. It wanted a system to capture and organise “the flow of one person’s experience” so the system could trace the threads of an individual’s life.1 The notice is still readable today, and it is far more specific than most retellings.
Critics did not buy the narrow framing. The Federation of American Scientists’ Steven Aftergood called it potentially “TIA cubed” — Total Information Awareness plus your body and your reading list.5 Total Information Awareness was the Pentagon’s data-mining program for spotting terrorists in ordinary records, and by mid-2003 Congress was already moving to kill it. LifeLog was born under that cloud.
Put the documents on one line and the “same day” story becomes clearer — and a little more interesting than the meme.
BLUE Pentagon / Congress RED Facebook GOLD Public scrutiny DARK RED The collision
If Facebook were a disguised LifeLog, the 2004 version should look like the spec. It doesn’t. Thefacebook was a student directory with profiles and friend lists, built to beat Harvard’s own stalled online face book.4 The resemblance grows over the following decade — and it is the smartphone, not the website, that finally matches LifeLog line for line.
| LifeLog asked for [1] | Thefacebook, Feb 2004 [4] | Facebook / smartphone era |
|---|---|---|
| A searchable timeline of your life | No — a static profile page | Facebook “Timeline”, 2011: pitched as “the story of your life”10 |
| Map of your relationships | Yes, in embryo: a friend list and class search | The social graph, plus contact uploads from your phone (see Digital Twins) |
| GPS, movement, body sensors | No | Built into every phone and smartwatch |
| Email, messages, calendar | No | Messenger, WhatsApp, Instagram DMs |
| Logging encounters between wearers | No | Bluetooth proximity — used by COVIDSafe in 202020 |
| Infer habits, plans and intentions | No | The business model of targeted advertising |
| Who controls the data | The user (a handful of researchers) | The platform — and, by legal process, governments |
Even LifeLog’s creator sees the family resemblance. Douglas Gage told Vice in 2018 that “Facebook is the real face of pseudo-LifeLog” — and said he rarely uses it.5 Microsoft’s lifelogging pioneer Gordon Bell, whose work DARPA drew on, told public radio WHYY he once met Facebook early on and suggested it build a timeline.6 That is influence of ideas, openly described — not a transfer of a program.
The CIA isn’t in LifeLog. It is, however, a couple of handshakes from Facebook’s early money. These links are documented, and we list them exactly, without inflating them.
If the money trail interests you, our earlier file The Nudge Machine follows a different line: the former intelligence and law-enforcement officials who later took trust-and-safety jobs inside the platforms.
Here is where the legend undersells the record. LifeLog the program died. The capabilities it described did not — and some of them went straight back into government hands through other doors.
1. The classified annex. When Congress killed Total Information Awareness, it explicitly allowed its “processing, analysis, and collaboration tools” to continue under the foreign-intelligence budget, described in a classified annex.7 What happened inside that annex is, by design, not public.
2. The assistant. The “software secretaries” Shachtman said were still moving ahead became DARPA’s PAL program. Its SRI-led arm, CALO, was a five-year, $150 million effort; SRI spun it out as Siri in 2007, Apple bought it in 2010, and it shipped on the iPhone 4S in 2011.29
3. The soldier. Seven months after LifeLog, DARPA’s ASSIST program asked for worn sensors that turn a patrol into a digital memory.8
4. The platform. NSA slides leaked in 2013 list Facebook as a PRISM source from 2009.16 Facebook said it gives no government organisation direct server access and responds only to lawful requests about specific people.17 Either way, the state did not need its own LifeLog once it could ask the companies holding ours.
We covered PRISM and the data-broker loophole in detail in 1984 By Consent. The point here is narrower: the public objection in 2003 was to a government recorder. The objection never transferred to private recorders that the government could subpoena. Aftergood made exactly that point to Vice: we handed advertisers and data brokers the same detail without the opposition LifeLog provoked.5
LifeLog’s optional task 5(b) imagined wearable recorders swapping notes about the people they met. Seventeen years later, millions of Australians installed exactly that — and the record of what happened next is all public.
Launched on 27 April 2020, COVIDSafe used each phone’s Bluetooth to log close contacts with other users, ready to upload to a national data store if a user tested positive.2021 The Commonwealth wrapped it in purpose-built privacy law and independent oversight. The results, in the Health Minister’s own release:
Two facts from the oversight reports matter more than the cost. First, the Inspector-General of Intelligence and Security found that intelligence agencies had incidentally collected COVID app data while lawfully collecting other data — permitted under the Privacy Act — with no evidence it was targeted, decrypted or used, and steps under way to quarantine and delete it.21 Second, the Minister ordered the app ended and all data deleted from 16 August 2022, with the Information Commissioner to check the deletion.19
The state check-in apps were not Bluetooth encounter logs — they recorded which venue you entered, and when. Western Australia’s SafeWA was promoted as being for contact tracing only. The WA Auditor-General found that police obtained six production orders and made one further request for SafeWA data, in matters including a murder, a stabbing and an assault; WA Health handed data over three times before Parliament passed urgent legislation in June 2021 to stop it.22 By May 2021 more than 1.9 million people had registered, with over 217 million check-ins.22
myID is a different lineage. It began as myGovID, released by the ATO and Digital Transformation Agency in 2019; by November that year 86,727 digital identities had been set up, and the government already said it planned to accredit banks and utilities to make it a “whole-of-economy” system.23 It was renamed myID on 13 November 2024, partly to stop people confusing it with myGov,24 and the Digital ID Act 2024 commenced weeks later. COVIDSafe is gone; myID is the one that kept growing:
| Measure | Figure | Source |
|---|---|---|
| Digital identities, Nov 2019 | 86,727 | DTA dashboard23 |
| myIDs, Dec 2025 | 15 million | Finance Minister25 |
| Authenticated transactions, May 2024–Apr 2025 | 36.5 million | Finance Minister26 |
| Authenticated transactions, May 2025–Apr 2026 | 113 million (more than triple) | Finance Minister26 |
| Government services accepting Digital ID | 264 (155 Commonwealth, 109 state) | Finance Minister26 |
| Private sector | Accredited private providers join from 1 Dec 2026; businesses using myID pay from 1 Jan 2027 at the latest | Finance Minister26 |
| Next on the list | Verifiable credentials (RSA, working-with-children, white cards); Digital ID for anti-money-laundering ID checks; a rental-application pilot | Finance Minister25 |
Digital ID is voluntary, and the government says other identity-checking methods remain available.26 But the shape is worth naming. LifeLog was a recorder looking for an identity to attach to. myID is an identity looking for records to attach to — tax, Medicare, Centrelink, state licences, and soon your bank, your landlord and your employer’s compliance checks. The phone in your pocket already holds both halves; the Bluetooth radio that did COVIDSafe’s logging is still switched on in most of them. For how that kind of passive sensing has gone further still, see The Router in the Room.
1. LifeLog was a DARPA program, not a CIA one. It was dropped in late January 2004 and the cancellation was reported on 4 February 2004 — the day thefacebook.com launched.
2. LifeLog never awarded a contract and planned to record about a dozen volunteers. Thefacebook in 2004 was a student directory. There is no evidence one became the other.
3. The intelligence world does appear around Facebook’s early investors — Thiel’s Palantir took CIA venture money, and Breyer had close ties to In-Q-Tel’s founder — but not as an investor in Facebook itself.
4. LifeLog’s parts survived: TIA tools in a classified annex, DARPA’s assistant research (which became Siri), the soldier-worn ASSIST, and from 2009 PRISM access to platform data.
5. In Australia, a Bluetooth encounter log reached 7.9 million registrations; spy agencies incidentally collected some of its data; WA police obtained check-in data three times; and a separate national identity system is now opening to the private sector.
That Facebook was a DARPA or CIA front: nothing in the record shows it, and the people who would know — including LifeLog’s own creator, who openly dislikes Facebook — describe a convergence of ideas, not a handover. That the “same day” proves design: the decision predates the launch, and the matching date is the news report. That COVIDSafe became myID: different apps, different departments, and COVIDSafe’s data was ordered deleted. That intelligence agencies used COVID app data: their watchdog found incidental collection, not use. And that myID is compulsory: it is voluntary today. We flag what to watch — scope creep from government services into banking, renting and work — because that is where the trend line points, not because it has already happened.
This is information, not instruction — and not legal advice. If the LifeLog story bothers you, the practical question is how much of your own life log you leave switched on, and who you let attach an identity to it.
◆ FIND US ◆ FOLLOW US ◆