Skip navigation

What's Up With WhatsApp?

Let me see if I can answer some of these questions.

Reputation

Not forgetting that Facebook bought WhatsApp in 2014 for $19 billion and therefore their reputations are bound together, Mozilla answers the first question most clearly:

Despite Facebook's claims to the contrary, Facebook gives third-party companies your data, including partners who use their analytics services, advertisers, law enforcement, etc.

A Cheat Sheet for WhatsApp Privacy (Mozilla.org)

WhatsApp has some privacy settings that can be activated (they are inactive by default) to make it more private, but...

this isn't enough as there is an evident lack of transparency between the app and the users. If you choose to use it, it is your responsibility to utilize the features provided by the app to your advantage to maintain privacy.

Ibid.

It's this lack of transparency that is the biggest issue for a lot of people, in combination with that fact that Facebook, now called Meta, is behind the app. Facebook has always been terrible on privacy; my lecturers warned me about this in 2005 (Facebook has only been around since 2004); this Stiftung Warentest review (German) highlighted the issue in 2010. And a lot of people got upset in 2021 over WhatsApp's data-sharing policy.

So it's just paranoia?

Data

WhatsApp collects the following data:

All these data are linked to your identity.

What exactly WhatsApp does with these data is unknown but it admits to sharing some of it with its big brother and third parties - that's its business model, after all.

Security

WhatsApp messages to private contacts are encrypted by default since 2016, which means no-one knows the content of your communication except you and the person you call or write to. That doesn't apply to WhatsApp Business. Old-school text messages and e-mails are not encrypted. This means WhatsApp is more private than those options.

But...

firstly, that's not quite true. If a message if reported as abuse it gets automatically forwarded to WhatsApp so they can check the content. They have a team of 1000 house elves for this job, which means its quite a few messages world-wide.

Further, the above meta-data (pun not intended) reveal as much about you as they (WhatsApp, Facebook, Meta, Instagram, et al) need to know in order to generate a very detailed profile about you, in order to deliver tailor-cut advertising to you and earn an extreme amount of money (not millions but billions). For example, if you called your doctor with WhatsApp and straight afterwards your health insurance, then they already know too much about your private life. That may seem like a silly example but it's merely a simplified example of exactly what they are doing to find out all they can about you.

WhatsApp conforms to GDPR (it has different terms and conditions for the US, EU and UK because of the different laws) but only because you have consented to it sharing your data. But you are not only sharing your data, you are sharing all your contacts' data. Who are your contacts? Are they not your friends and family? Why are you sharing their data with Big Brother Facebook? Are your contacts business contacts? If it is not stated in your contract that you may not share business contacts' data with third parties then you are a very lucky person! Ultimately, the biggest problem with WhatsApp is not using it but installing it. Before you install WhatsApp you should really ask each and every one of your contacts if they are okay with that. If they already use WhatsApp themselves then you don't need to ask their permission. So you have three options:

  1. Install a secure app for all your contacts (Google Play) in order to keep them out of WhatsApp's reach (App Store) and only share with the app those who are already WhatsApp users.
  2. Buy a second phone for WhatsApp and only save WhatsApp contacts on it.
  3. Delete it and use a private and secure app instead.

Is it okay to use WhatsApp?

Children under 13 are not allowed to use WhatsApp.

If you...

then yes, sure, it's okay to go ahead and share your personal data with a monstrous conglomerate earning billions of dollars with your data. They're rich enough anyway - what's a few extra dollars going to change?

By way of alternative, you can use Signal or Threema.