California's Digital Age Assurance Act for iOS and Android apps
The law (AB 1043, amended by AB 1856, signed September 10, 2026) works with four brackets: under 13, 13 to under 16, 16 to under 18, and 18 and over. If an app last updated on or after January 1, 2026 was downloaded before January 1, 2027 and no signal has been requested, the developer must request one before July 1, 2027. The Attorney General can seek civil penalties of up to $2,500 per affected child for each negligent violation and $7,500 per affected child for each intentional one. The engineering is contained: request the signal at download and launch, store the bracket against the account, and expose it to the features that change behavior by age. An agent writes the module and its tests; an engineer decides where the bracket lives, who can read it and what happens when no signal comes back.
Feeds and design duties for apps used by minors in California
AB 2246, signed September 10, 2026, repeals and replaces the Age-Appropriate Design Code Act. Under it, a business whose online service, product or feature is likely to be accessed by children under 18 must take reasonable steps to prevent specified risks of harm, including reasonably foreseeable physical or financial harm and severe psychological or emotional harm. A child may void contract terms entered into as a result of a design feature, and civil penalties run up to $5,000 per affected child for each negligent violation and $15,000 for each intentional one. Social apps also face SB 976. In its September 9, 2025 decision, the Ninth Circuit declined to enjoin the ban on giving minors an addictive feed without parental consent and the private-account default, while the restriction on sending minors notifications remained preliminarily enjoined. From January 1, 2027, covered platforms must apply the restrictions to all users unless they have reasonably determined a user is an adult.
Health and mental health apps under California medical privacy law
Under Civil Code §56.06 of the Confidentiality of Medical Information Act, a business offering a mobile application designed to maintain medical information, either so users can manage their own information or for diagnosis, treatment or management of a medical condition, is deemed a provider of health care. A business offering a mental health digital service is treated the same way. Both must meet the same confidentiality standards, and face the same penalties for improper use and disclosure, as a health care provider. For a wellness, symptom or therapy app, that changes engineering choices: which analytics and crash-reporting SDKs may see screen content, what goes into logs, how long data stays on the device, and whether tokens sit in the Keychain on iOS and the Keystore on Android rather than in plain storage.
Accessibility and Unruh Act damages for apps used in California
Through Civil Code §51(f), California's Unruh Civil Rights Act treats any violation of the federal Americans with Disabilities Act as an Unruh violation. Civil Code §52(a) then sets liability at actual damages plus up to three times actual damages, in no case less than $4,000, along with attorney's fees. Federal DOJ guidance for private businesses (March 18, 2022) says the Department does not have a regulation setting out detailed standards. It still holds that the ADA covers goods and services offered on the web and cites WCAG and the Section 508 Standards only as helpful references. Whether a particular app is covered is worth confirming with a lawyer. So plan accessibility as normal work: labelled controls, text that scales without breaking layouts, sufficient contrast and a logical focus order. Adding labels and roles across every component is volume an agent handles well. Sign-up, payment and account deletion are the flows worth checking by hand with VoiceOver and TalkBack.
How AI agents and engineers split a React Native app build
Every agent task is written by an engineer first, stating what done looks like and which parts of the app are off limits. Claude Code or Cursor then scaffolds screens, navigation, list rendering and form validation, writes tests and drafts store metadata, and type checks, lint and tests must pass before a change is proposed. Token storage, auth refresh, server-side entitlement checks, offline and reconnection behavior, permission prompts and the privacy declarations for App Store and Google Play review stay with engineers. On the mobile side, the studio has shipped TrendinChat (trendin.chat), a React Native chat app built in two weeks, and Coffict (coffict.com), both for clients in Türkiye.
