Chat apps

Introduction

Instant messaging apps have evolved from simple text messaging tools to become our primary means of digital communication since the early 2000s. These apps now handle everything from text and voice messages to video calls and file sharing, but their approaches to privacy and security vary dramatically, making your choice of chat app crucial for protecting your personal communications.

Providers

The following providers are are ranked in order of preference, with a balance between privacy and usefulness. Providers at the top of the list are recommended, and providers at the bottom are not recommended. There is no point convincing your friends and family to switch to a more private messaging app if it’s not user friendly and missing features.

Element

Video calls: Yes
End-to-end encryption: Yes (default in private chats)
Metadata collection: No (decentralized Matrix network)
Phone number required: No
Open source: Yes
Platforms: iOS, Android, MacOS, Windows, Linux, Web

Keet

Video calls: Yes (peer-to-peer)
End-to-end encryption: Yes
Metadata collection: No
Phone number required: No
Open source: Yes (built on Hypercore protocol)
Platforms: iOS, Android, MacOS, Windows, Linux

Signal

The gold standard for secure messaging, Signal offers end-to-end encryption by default for all communications. Developed by a non-profit foundation, it collects minimal metadata and has been proven secure through multiple independent audits. The app requires a phone number but stores no user data on its servers.

Session

Video calls: No
End-to-end encryption: Yes
Metadata collection: No
Phone number required: No
Open source: No
Platforms: iOS, Android, MacOS, Windows, Linux

Meta’s popular messaging app uses Signal’s encryption protocol for messages but collects extensive metadata about users’ communications. In 2021, WhatsApp’s privacy policy update revealed increased data sharing with Facebook, leading to concerns about user privacy and data collection practices.

While popular for its features, Telegram only provides end-to-end encryption in “Secret Chats” mode. Regular chats and group conversations are stored on Telegram’s servers. The platform has faced criticism for its approach to encryption and has been blocked in some countries over refusing to provide user data to authorities.

iMessage

Video calls
End-to-end encryption: Yes (except in the UK)
Metadata collection: Yes
Phone number required: No
Open source: No
Platforms: iOS, MacOS, Windows

Facebook Messenger

Video calls: Yes
End-to-end encryption: Yes (message body only)
Metadata collection: Yes
Phone number required: No
Open source: No
Platforms: iOS, Android, MacOS, Windows

Viber

Video calls: Yes
End-to-end encryption: Yes
Metadata collection: Yes
Phone number required: Yes
Open source: No
Platforms: iOS, Android, MacOS, Windows, Linux

Discord

Popular among gamers and communities, Discord offers no end-to-end encryption and collects significant user data. In 2021, the platform faced scrutiny over its data collection practices and handling of harmful content. Messages, voice chats, and user activity are stored on Discord’s servers.

Kik

Video calls: No
End-to-end encryption: No
Metadata collection: Yes
Phone number required: No (username-based)
Open source: No
Platforms: iOS, Android

WeChat

Video calls: Yes
End-to-end encryption: No
Metadata collection: Yes
Phone number required: Yes
Open source: No
Platforms: iOS, Android, MacOS, Windows, Linux

Snapchat

Video calls: Yes
End-to-end encryption: No (except for “Snapchat+” private media)
Metadata collection: Yes
Phone number required: Yes
Open source: No
Platforms: iOS, Android, MacOS, Windows, Linux

Recommendations

Use Signal for sensitive communications and private conversations
Enable disappearing messages for sensitive chats when available
Regularly review and update privacy settings in all chat apps
Be cautious about joining large group chats where privacy is harder to maintain
Use chat apps that don’t require phone numbers for anonymous communications
Keep apps updated to receive the latest security patches

Actions

Install Signal and set it up as your primary messenger
Enable end-to-end encryption in all chat apps where possible
Review and adjust message retention settings in each app
Leave unnecessary group chats and delete old conversations
Enable two-factor authentication on all chat accounts
Audit which devices and computers have access to your chat accounts
Review and revoke third-party app access to your chat accounts