Signal

Signal

Review date: Sept. 8, 2021

|
|

Mozilla says

|
People voted: Not creepy

We love Signal! Signal is owned by a non-profit. Their mission is to "develop open source privacy technology that protects free expression and enables secure global communication." What’s that mean? It means Signal is a free, open source, privacy-focused messaging and video chat app that totally rocks. They even added support for group video calls at the end of 2020. Signal isn't pushing ads or tracking your data to try and make money off you in any way. They rely on donations from generous users to keep their app open and free for all. Nonprofits that embrace privacy for all are the bomb (ahem, Mozilla is also a non-profit that embraces privacy and relies on donations from generous users to do our work).

What could happen if something goes wrong?

Earlier in 2021 when WhatsApp (owned by Facebook) announced a change to their privacy policy, many privacy conscious users made the switch to Signal (I remember well because Signal struggled to up their server capacity to handle all the new users for a while. I dropped a couple of bucks in their donation bin to help them out then). Users who jumped from WhatsApp to Signal made a good move. Signal's open-source end-to-end encryption is lauded by many security professionals. And Signal won't track you or sell your data to strangers who could use it to target you with weird ads. Shoot, it was even recently reported that Facebook CEO Mark Zuckerberg himself uses Signal. That says a lot. What could happen if something goes wrong? Well, we suppose you could always show up in Mark Zuckerberg’s contacts and he could get one of those annoying “your contact is now on Signal '' texts. Fortunately, you can turn those notifications off in Signal’s settings.

mobile Privacy Security A.I.

Can it snoop on me? information

Camera

Device: N/A

App: Yes

Microphone

Device: N/A

App: Yes

Tracks location

Device: N/A

App: No

What can be used to sign up?

What data does the company collect?

How does the company use this data?

According to Signal, it "does not sell, rent or monetize your personal data or content in any way – ever". Signal implements the principles of data minimization - only the phone number is used as the data source - and of data protection by default & by design.

How can you control your data?

You can unregister your phone number - but you will need access to it, and you can do it through the app only. You also have controls over deleting messages & chats, so that other users do not have access to them any more .

What is the company’s known track record of protecting users’ data?

Average

There were no data breaches associated with Signal. In January 2021, Google Project Zero security researcher Natalie Silvanovich discovered a bug in Signal that would allow audio to be transmitted without user consent. The bug was promptly fixed. Signal does reveal if someone uses their service, once you know their phone number. For example, it is known that Mark Zuckerberg himself is on Signal. Once someone in your contacts joins a service, you can see it, if you are a user, too. It is a useful feature if you want to know who is around to chat with in the app, but can be annoying (and potentially dangerous) if you want to be there secretly, or if your government has banned Signal.

Can this product be used offline?

N/A

User-friendly privacy information?

Yes

Signal's privacy policy and terms of use are an example of how concise a these policies can get when a product is built based on strong security principles. Lengthy policies can be a sign of questionable data practices. In addition, there is FAQ with insights into security features, GDPR rights, etc.

Links to privacy information

Does this product meet our Minimum Security Standards? information

Yes

Encryption

Yes

Signal uses full end-to-end encryption. Also, Signal uses the great practice of end-to-end encrypting profile data. It means that even if you decide to provide your profile information, Signal will not have access to it - it will be only shared with your contacts / with whom you chose. Another good practice is a secure discovery who among your contacts uses the service (again, optional). For this, information from the contacts on your device may be cryptographically hashed and transmitted to the server in order to determine which of your contacts are registered.

Strong password

Yes

You can lock your Signal app with a passcode

Security updates

Yes

Manages vulnerabilities

Yes

Anyone can report a vulnerability

Privacy policy

Yes

Does the product use AI? information

Can’t Determine

Is this AI untrustworthy?

Can’t Determine

What kind of decisions does the AI make about you or for you?

Is the company transparent about how the AI works?

Can’t Determine

Does the user have control over the AI features?

Can’t Determine

*privacy not included

Dive Deeper

  • If you value your privacy, switch to Signal as your messaging app now
    Fast Company
  • Signal’s newest feature shows why putting privacy first is so hard
    Fast Company
  • Bugs in Signal, Facebook, Google chat apps let attackers spy on users
    Bleeping Computer
  • Signal Is Finally Bringing Its Secure Messaging to the Masses
    Wired
  • Mark Zuckerberg is using Signal, according to phone number leaked in Facebook hack
    Mashablew
  • Signal Vs Telegram—3 Things You Need To Know Before You Quit WhatsApp
    Forbes
  • Signal Jabs at Facebook and Navigates Growing Pains as Popularity Surges
    Bloomberg

Comments

Got a comment? Let us hear it.