The Design Covenant · Paper III

What Notification Architecture Could Be

Friction by Design — the Case for Opt-In, Batched, and Time-Bounded Notification Systems

The Institute for Cognitive Sovereignty · 2026 · Research Paper · Open Access · CC BY-SA 4.0

ICS-2026-DC-003 Published March 6, 2026 18 min read
80
Average push notifications received daily by US adults — each one a behavioral interrupt that reinstantiates the seeking circuit
23 min
Average time to return to the original task after a digital notification interrupt — per Gloria Mark's concentration research at UC Irvine
0
Major social platforms defaulting push notifications to opt-in rather than opt-out — despite the opt-out default being the primary mechanism of notification capture
“Every time you get a notification, it's like a small slot machine pull. You never know if it's going to be something exciting — a new follower, a comment, a like — or nothing. That uncertainty is exactly what makes it compelling.”
— Nir Eyal, Hooked: How to Build Habit-Forming Products, 2014 — describing the variable-ratio reinforcement schedule built into notification design
Section I

The Attention Interrupt Architecture

A push notification is a behavioral interrupt. It terminates whatever cognitive activity the user is engaged in — work, conversation, sleep, reading, or simply the absence of device interaction — and demands the user's attention. The demand is presented as information (a badge count, a preview text, a sound cue) but is experienced neurologically as an interruption of the default mode network that governs sustained attention, followed by a switch-cost to the evaluative processing required to determine whether the notification warrants engagement.

The average US adult receives approximately 80 push notifications per day across all apps. Research by Gloria Mark at UC Irvine, conducted across multiple studies from 2004 to 2020, establishes that the average recovery time to the original task following a digital notification interrupt is approximately 23 minutes. The arithmetic consequence of these two figures is that a user receiving the average number of daily notifications is spending more time in post-interrupt recovery than in any extended period of uninterrupted cognitive work. The cumulative attention cost of the notification architecture as currently deployed is measured in hours per day per person.

This would be a significant social cost even if individual notifications were uniformly valuable. The research on notification content establishes that they are not. Studies of notification utility — measured by whether users, when surveyed immediately after engaging with a notification, report that the notification was worth receiving — find that the majority of platform push notifications are rated as not useful. The ratio of disruptive interrupts to valued interrupts, averaged across the current notification ecosystem, is substantially negative.


Section II

What Notification Systems Were Designed to Do

The push notification was not designed as a user utility feature. It was designed as a re-engagement mechanism. Platforms that have acquired user attention and then lost it to session termination face the problem of getting the user back. The push notification is the solution the industry converged on: an interrupt that pulls the user back into the platform from whatever they were doing when they left.

The notification's function in the platform's engagement system is analogous to a fishing hook rather than a communication channel. It is not primarily designed to convey information that the user needs; it is designed to generate a return visit. The information in the notification — the number of likes, the new follower, the reply to a comment — is bait rather than content. The engagement it drives is the pull rather than the catch.

This design intent is visible in the notification decisions that platforms make. Notifications that generate re-engagement — social interactions, content from followed accounts, engagement with the user's own content — are prioritized and enabled by default. Notifications that would be genuinely useful but that do not generate platform re-engagement — privacy breach alerts, unusual account activity, data export completion — are often buried in settings, require opt-in, and are provided less prominently than engagement notifications. The selection of what to notify about reflects the platform's re-engagement objective rather than the user's information needs.

The transition from notification-as-communication to notification-as-re-engagement was not instantaneous. Early mobile notification systems (iOS push notifications, introduced in 2009) were used primarily for functional communications: messages received, calls missed, calendar alerts, email arrivals. The expansion of notification use to engagement re-engagement happened gradually through 2010–2014 as platforms discovered that social engagement notifications (likes, comments, follows) produced substantially higher re-engagement rates than functional notifications. By 2015, the notification ecosystem had been thoroughly colonized by re-engagement uses, and the functional-communication use case had become a minority of total notification volume.


Section III

Variable-Ratio Reinforcement in Practice

The notification system's power as an attention-capture mechanism derives not from the value of any individual notification but from the reinforcement schedule on which notifications arrive. Variable-ratio reinforcement — in which rewards arrive unpredictably, on a schedule that cannot be anticipated — produces the most persistent and extinction-resistant behavioral patterns of any reinforcement schedule studied in behavioral psychology. It is the schedule used in slot machines, and it is the schedule produced by social engagement notifications.

A user who has posted content to a social platform and is awaiting engagement receives notifications at variable and unpredictable intervals. The next notification might arrive in 30 seconds (high reward — a like from an influential follower) or in three hours (low reward — a like from an account they don't recognize) or not at all. The unpredictability of the reward timing is not incidental; it is the mechanism that makes the notification system maximally compelling. The behavioral pattern it produces — frequent checking, difficulty ignoring the notification sound cue, elevated heart rate response to notification arrival — is functionally identical to the behavioral pattern produced by slot machine play.

Platforms are aware of this mechanism. The Nir Eyal Hooked model, which describes the variable-ratio reinforcement mechanism and recommends it as a design framework for building habit-forming products, was explicitly referenced in internal Facebook design documents disclosed in 2021. The platforms that designed notification systems on variable-ratio schedules knew they were implementing a behavioral compulsion mechanism. The classification of this mechanism as a “feature” rather than a harm reflects a choice about whose interests the product is designed to serve.


Section IV

The Evidence on Notification Harms

The research on notification harm covers three distinct domains: attention fragmentation, sleep disruption, and anxiety activation. Each has a separate mechanism and a separate evidence base.

Attention Fragmentation

Mark et al. (2016) conducted an ecological study of knowledge workers, tracking attention and notification receipt through software logging and experience sampling. The study found that workers who received higher volumes of notifications reported lower ability to concentrate, higher stress, and lower task completion rates. Workers who temporarily disabled notifications reported improved concentration and reduced stress within hours. The attention fragmentation effect is dose-dependent: more notifications produce more fragmentation, independent of the informational content of the notifications.

Sleep Disruption

Smartphone notifications received during sleep hours produce documented sleep disruption even when the phone is silenced. Research on light-induced sleep disruption (Cain and Gradisar, 2010) establishes that screen light exposure suppresses melatonin secretion even at short durations. The behavioral response to night-time notifications — waking, checking the phone, processing the content, attempting to return to sleep — is documented in adolescent populations at rates that explain a significant proportion of the adolescent sleep deficit documented in population studies. The Australian Online Safety Amendment Act's protection of “protected hours” from platform notification delivery is a policy response to this mechanism.

Anxiety Activation

The anticipatory anxiety produced by the notification system — the state of waiting for uncertain social feedback — is documented as a physiological stress response. Research using cortisol sampling and self-report measures finds elevated cortisol in users who have posted content and are awaiting engagement notifications, with the elevation persisting until notification receipt and then resetting as the post-notification evaluation process begins a new cycle. Users who disable notifications report lower anxiety, lower cortisol levels, and lower self-reported social comparison frequency — at the cost of lower engagement metric awareness.

Named Condition
The Notification Trap
The design configuration in which push notifications are enabled by default, delivered on variable-ratio reinforcement schedules, and optimized for platform re-engagement rather than user information utility — producing a system in which the majority of users remain in continuous behavioral interrupt exposure through default-state inertia, experiencing documented attention fragmentation, sleep disruption, and anticipatory anxiety as costs of remaining connected to platforms that they use for genuine social value, without awareness that the notification architecture is a design choice that could be structured differently.

Section V

What Opt-In, Batched, Time-Bounded Looks Like

The alternative notification architecture has three components. Each addresses a specific documented harm mechanism.

Opt-In Default

A new user who has not taken an affirmative action to enable notifications receives no push notifications. The platform may display an in-app prompt, after a period of voluntary use (not during onboarding), asking whether the user would like to enable notifications and specifying what types of notifications are available. The default state — no notifications — is the state in which the user lands if they take no action. This default engages default-state inertia in the direction of user cognitive wellbeing rather than platform re-engagement.

Users who opt in may specify notification types, notification frequency, and notification hours. The platform does not override these specifications with “important” notification exceptions. The user's specification is honored without exception.

Batched Delivery

Notifications that the user has opted into are not delivered in real time. They are batched and delivered at user-specified intervals: once in the morning, once in the afternoon, once in the evening — or whatever interval the user selects, with a minimum interval of one hour. Batching eliminates the variable-ratio reinforcement schedule. A user who knows that notifications arrive at noon and 6pm cannot be compelled by notification-anticipation between those times. The behavioral compulsion mechanism requires the unpredictability of notification arrival; batching removes that unpredictability.

Protected Hours

No platform push notifications are delivered during protected hours: 10pm to 7am by default, with user-adjustable windows. For users under 18, protected hours additionally cover school hours (8am–3pm on weekdays). These protections cannot be overridden by the user during an individual session — they can only be changed through a deliberate settings action that requires re-affirmation of the change after 24 hours. The friction requirement prevents impulsive protected-hour disabling without creating a permanent barrier to users who genuinely want notifications during those periods.

Current Architecture Harm Mechanism Alternative Architecture Mechanism Change
Opt-out default (notifications on) Default inertia keeps majority in notification exposure Opt-in default (notifications off) Default inertia protects majority from notification exposure
Real-time delivery Variable-ratio schedule; compulsive checking Batched delivery at user-set intervals Predictable schedule; checking behavior extinguishes
24/7 delivery including sleep hours Sleep disruption; night-time re-engagement Protected hours (10pm–7am) Sleep protected; night-time anxiety loop terminated
Re-engagement optimized content Notifications bait engagement rather than inform User-specified notification types only User controls information channel; platform loses re-engagement mechanism

Section VI

Technical and Commercial Feasibility

The opt-in, batched, time-bounded notification architecture is technically trivial to implement. iOS and Android both provide the infrastructure for notification batching, time-gating, and granular permission controls. The major platforms already use this infrastructure for some notification categories. Extending it to implement the full alternative architecture requires software configuration changes, not new technology development. Engineering estimate: 150–300 hours per platform to implement, test, and deploy.

The commercial impact is the constraint. Platforms that rely on notifications for re-engagement will experience reduced re-engagement rates from users on the opt-in architecture. The magnitude of this reduction depends on opt-in rates, which will be substantially lower than the current near-universal default-on rate. The revenue impact is real, on the same order as the chronological feed revenue impact discussed in DC-002.

The commercial case for the alternative architecture rests on the same long-term argument as the chronological feed: users who find the platform less compulsive and more trustworthy are users who continue using the platform voluntarily rather than drifting away through exhaustion with the compulsion cycle. The long-term retention value of a less compulsive notification architecture is positive; the question is whether the short-term engagement reduction is more costly to the platform than the long-term retention improvement.

Counterpoint Acknowledged
Some notifications are genuinely urgent and time-sensitive

The opt-in, batched architecture performs poorly for genuinely urgent communications: a direct message from a family member in an emergency, a security alert requiring immediate response, a time-sensitive event notification. Batching these notifications to a scheduled delivery window imposes a cost that is real and not trivial.

The response is architectural: an urgent notification category, defined by the user rather than the platform, that bypasses batching. A user who designates a family member's direct messages as urgent-category receives those messages in real time. The urgency designation is user-controlled, not platform-controlled. The platform cannot designate its own promotional content or re-engagement notifications as urgent-category. This preserves the value of genuine urgent communication while removing the variable-ratio re-engagement mechanism from the notification system.


Section VII

What the Architecture Demands

The notification architecture demands a specific legislative treatment that is distinct from the treatment of content and feed architecture. Notification design is a behavioral mechanism operating at the hardware interrupt level — it affects users who are not actively using the platform, in contexts (sleep, work, family interaction) where platform engagement is maximally disruptive. This makes notification architecture the highest-priority design element for any regulatory framework addressing attention capture harms.

The Australian Online Safety Amendment Act's protected hours provision represents the most significant existing regulatory treatment of notification architecture. Protected hours prohibit notification delivery during sleep hours for minor users, addressing the sleep disruption mechanism directly. This is the right regulatory approach, and it should be extended: protected hours for all users, not only minors; opt-in rather than opt-out as the notification default; and batching as a required option that platforms must provide.

The Design Covenant (DC-005) includes the opt-in, batched, protected-hours notification architecture as a required commitment for signatory platforms. The Measurement Reformation series (MR-003) will propose the specific metrics — notification response rates by user preference, voluntary return rates following notification-free periods — that would allow regulatory compliance with notification architecture standards to be assessed externally.

The notification trap is the most individually reversible of the attention capture mechanisms documented in this series. A user who disables notifications unilaterally receives immediate measurable benefit in concentration, sleep quality, and anxiety reduction. The barrier to individual remediation is the default-state mechanism: users who have never been told that notification-off is an available option, and who experience the social anxiety of potentially missing important messages, will not typically disable notifications without prompting. The regulatory and design task is to change the default so that the individually beneficial choice is the choice that requires no action.


Sources and References

  • Mark, Gloria, Daniela Gudith, and Ulrich Klocke. "The cost of interrupted work: more speed and stress." CHI '08 Proceedings, ACM, 2008. On 23-minute recovery time.
  • Mark, Gloria, et al. "Email duration, batching and self-interruption." CHI 2016 Proceedings, ACM, 2016. On notification volume and concentration.
  • Eyal, Nir. Hooked: How to Build Habit-Forming Products. Portfolio/Penguin, 2014. On variable-ratio reinforcement in notification design.
  • Skinner, B.F. The Behavior of Organisms. Appleton-Century-Crofts, 1938. On variable-ratio reinforcement schedules and extinction resistance.
  • Cain, Nicola, and Michael Gradisar. "Electronic media use and sleep in school-aged children and adolescents." Sleep Medicine, 11(8), 2010.
  • Lemola, Sakari, et al. "Adolescents' electronic media use at night, sleep disturbance, and depressive symptoms in the smartphone age." Journal of Youth and Adolescence, 44(2), 2015.
  • Thomée, Sara, et al. "Mobile phone use and stress, sleep disturbances, and symptoms of depression among young adults." BMC Public Health, 11(66), 2011.
  • Duke, Éilish, and Christian Montag. "Smartphone addiction, daily interruptions and self-reported productivity." Addictive Behaviors Reports, 6, 2017.
  • Bayer, Joseph B., et al. "Media at the margins: Mobile phone use among adults." Journal of Computer-Mediated Communication, 21(1), 2016.
  • Alter, Adam. Irresistible: The Rise of Addictive Technology and the Business of Keeping Us Hooked. Penguin Press, 2017.
  • Haugen, Frances. Whistleblower disclosures, October 2021. References to Nir Eyal framework in internal Facebook design documents.
  • Apple Inc. "Focus modes in iOS 15." Developer documentation, 2021. On notification batching infrastructure.
  • Andrews, Sally, et al. "Beyond Self-Report: Tools to Compare Estimated and Real-World Smartphone Use." PLOS ONE, 10(10), 2015. On notification volume measurement.
  • Pielot, Martin, et al. "An in-situ study of mobile phone notifications." MobileHCI '14 Proceedings, ACM, 2014. On notification utility ratings.
How to Cite

The Institute for Cognitive Sovereignty. (2026). What Notification Architecture Could Be [ICS-2026-DC-003]. The Institute for Cognitive Sovereignty. https://cognitivesovereignty.institute/design-covenant/what-notification-architecture-could-be

References

Internal: This paper is part of The Design Covenant (DC series), Saga V. It draws on and contributes to the argument documented across 20 papers in 5 series.

External references for this paper are in development. The Institute’s reference program is adding formal academic citations across the corpus. Priority papers (P0/P1) have complete references sections.