WhatsApp

WhatsApp

Facebook
Wi-Fi

Review date: Sept. 8, 2021

|
|

Mozilla says

|
People voted: Very creepy

WhatsApp is one of the most popular messaging apps in the world with around 2 billion (yes, billion) users worldwide. The app is encrypted by default with end-to-end encryption for both messages and calls, which is good for your privacy. It’s also owned by Facebook which means Facebook can access some data WhatsApp collects on you for specified purposes, which may be bad for your privacy. When it comes to video, WhatsApp allows for one-on-one calls and group calling with up to eight people. Just beware, WhatsApp has had a pretty well known misinformation problem and well, misinformation stinks.

What could happen if something goes wrong?

Facebook-owned WhatsApp caused quite the kerfuffle early in 2021 when it complained about Apple’s app store privacy labels that show all the data an app links to you. It didn’t look good for WhatsApp, especially when Apple published the same info for their iMessage app. Then WhatsApp updated their privacy policy in a way that scared the pants off people, justified or not, which caused a huge jumping ship of WhatsApp users to apps like Telegram and Signal. And then Ireland hit WhatsApp with a record $266 million fine for an alleged lack of transparency over how it shares data with Facebook. So, what’s the deal? Is WhatsApp bad for privacy? From a technical perspective, no, not really. WhatsApp uses super strong end-to-end encryption for all texts, chats, and video calls, This is great! WhatsApp can’t read your messages or see your calls. The flip side of this is Facebook--a company infamous for its vast and questionably ethical collection of so much data--owns WhatsApp. This means that lots of metadata, things like purchase history, location, device ID, and more--can be captured and shared with businesses advertising on WhatsApp. People looking for a true privacy-centered messaging app can find better options, like Signal and Threema. Messaging aside, it's worth considering WhatsApp's role in spreading misinformation. In 2020, WhatsApp became such a major source of misinformation about the coronavirus that world leaders called out the app by name. WhatsApp did take steps to try and stop the flood of misinformation when it began limiting the number of times people could pass on frequently forwarded content to five chats at once. Misinformation is a problem these days, one everyone should be aware of and do their best to not make worse.

  • mobile

Can it snoop on me? information

Camera

Device: N/A

App: Yes

Microphone

Device: N/A

App: Yes

Tracks location

Device: N/A

App: Yes

What can be used to sign up?

What data does the company collect?

How does the company use this data?

There is a complex chain of how data moves between WhatsApp and Facebook Inc., and then to numerous third parties. If you use WhatsApp to communicate with businesses,the Facebook-owned messaging app can share a user's profile data with Facebook. The policy states 'We work with third-party service providers and other Facebook Companies to help us operate, provide, improve, understand, customize, support, and market our Services.'. This information could be used by Facebook and its other products to make suggestions for you, personalize features and content, help you complete purchases and transactions, and show relevant offers and ads across the Facebook Company Products. Facebook claims to not sell its data, but it shares data with numerous third parties such as partners who use their analytics services, advertisers, measurement partners, partners offering goods and services in Facebook products, vendors and service providers, researchers and academics, law enforcement, legal requests.

How can you control your data?

The only way mentioned in WhatsApp's policy to delete personal data is to delete the full account. Deleting your account deletes your account info and profile photo, deletes you from all WhatsApp groups, and deletes your WhatsApp message history. It can take up to 90 days to delete the data. Copies of your information may also remain after the 90 days in the backup storage, 'to recover in the event of a disaster, software error, or other data loss event'.

What is the company’s known track record of protecting users’ data?

Needs Improvement

In May 2019, WhatsApp announced a security breach associated with a surveillance authority. It did not disclose how many users were affected. In 2017, co-founders of WhatsApp have left the company, one of them, Brian Acton, saying "I sold my users' privacy to a larger benefit, I made a choice and a compromise. And I live with that every day."

Can this product be used offline?

N/A

User-friendly privacy information?

No

In May 2021, WhatsApp found itself at the center of controversy regarding its privacy policy. The main change was regarding sharing data, including communication content with businesses, with the larger Facebook Group. Many privacy-conscious users thought that ALL their communication data will be shared with Facebook (which is not the case). But it is hard to blame them, since WhatsApp's policy is not an example of a crystal clear one, nor was the process of its implementation soft. WhatsApp has been bombarding users for months with persistent pop-up messages to force them to accept its new terms of use and privacy policy. We too, as millions of WhatsApp users, found it hard to get what exactly is this update changing, looking at the privacy policy and terms of use only. Thus, we consider these documents to be confusing on purpose. Only the purpose is still unclear.

Links to privacy information

Does this product meet our Minimum Security Standards? information

Yes

Encryption

Yes

All messages and calls are end-to-end encrypted by default. Note that metadata is not encrypted and shared within Facebook Group.

Strong password

N/A

There is no password requirement to enter a call. WhatsApp allows users to set up a fingerprint lock or faceID as an extra layer of security, although this is not on by default, and for iPhones only.

Security updates

Yes

Manages vulnerabilities

Yes

Facebook has a bug bounty program for security vulnerabilities

Privacy policy

Yes

Does the product use AI? information

Can’t Determine

Is this AI untrustworthy?

Can’t Determine

What kind of decisions does the AI make about you or for you?

Is the company transparent about how the AI works?

Can’t Determine

Does the user have control over the AI features?

Can’t Determine

*Privacy Not Included

Dive Deeper

  • WhatsApp tightens message forwarding restrictions to combat coronavirus misinformation
    CNBC Link opens in a new tab
  • Five Things You Should Know About the WhatsApp Hack
    Security Boulevard Link opens in a new tab
  • WhatsApp Video Calls Will Soon Support 50: This Is Why 8’s The Limit For Your Security
    Forbes Link opens in a new tab
  • Signal Vs Telegram—3 Things You Need To Know Before You Quit WhatsApp
    Forbes Link opens in a new tab
  • WhatsApp launches disappearing photos and video for all your sensitive (and sexy) messages
    Mashable Link opens in a new tab
  • WhatsApp faces $267M fine for breaching Europe’s GDPR
    TechCrunch Link opens in a new tab
  • Disinformation Spreads on WhatsApp Ahead of Brazilian Election
    NY Times Link opens in a new tab
  • WhatsApp clarifies it cannot see your private messages
    Mashable Link opens in a new tab
  • WhatsApp is having another go at explaining its privacy policy to users
    The Verge Link opens in a new tab

Comments

Got a comment? Let us hear it.