True On / True Off
Define clear maximum and minimum sensing states
The Problem
Digital devices with sensors do not behave like simple electrical devices, yet users often apply the same mental model of “on” and “off.”In reality:
- Devices can operate in many intermediate and hidden states
- Sensors may remain partially active even when a device appears “off”
- External feedback is often ambiguous or absent
This creates a mismatch between what users believe and what the system is actually doing.
Why This Problem Matters
Ambiguous sensing states undermine:
- Trust in devices
- Users’ ability to make informed decisions
- Social accountability in shared environments
In multi-user contexts, this ambiguity forces non-owners to rely on assumptions or trust rather than verifiable information.
The Pattern
Define two enforceable, contrasting states for each sensor:
- True On: the sensor is operating at its maximum sensitivity and data processing capacity
- True Off: the sensor is completely deactivated and incapable of collecting data
These states establish a clear ceiling and floor for system behavior.
Core Principles / Insights
Bounded understanding
Users need clear extremes to reason about complex systems
True inactivity must be absolute
“Off” should mean no sensing capability, not idle or background activity
Sensor-specific states
Each sensing modality (camera, microphone, etc.) requires its own True On/Off
Legibility through contrast
Strong differentiation between states improves comprehension and trust
Design Guidelines
- Clearly define the maximum and minimum sensing states
- Ensure True Off disables sensing at the hardware or firmware level
- Provide distinct, unambiguous indicators for each state
- Treat “idle” or “standby” as “off”
- Collapse multiple sensing states into a single ambiguous “on/off” toggle
- Users can reliably distinguish True On from True Off
- The system cannot silently deviate from these states
Variations / Extensions
Independent True On/Off for camera and microphone True On/Off for derived capabilities (e.g., recording vs. live viewing)Integration with intermediate states (e.g., Sensor Dimmer) Lorem ipsum dolor sit amet consectetur. Urna consectetur massa scelerisque purus aenean. Feugiat nec est sed nibh. Duis quam commodo egestas donec sed suspendisse euismod turpis lacinia. Malesuada nisi viverra tristique nunc.
When to Use
- Devices with sensors (camera, microphone, location, biometrics)
- Systems with multiple possible sensing states
- Multi-user or shared environments
- Simple single-state devices with no sensing ambiguity
- Systems where sensing cannot be meaningfully disabled