Despite end-to-end encryption, WhatsApp is unfortunately no longer an option for people who value their privacy. This article explains why and looks at the alternatives.
Goodbye, WhatsApp!
What happened?
WhatsApp has changed its terms of service. Particularly troubling are
- sharing data with Facebook
- sharing data with third parties
- analysing the data and
- processing the data.
These changes are unacceptable from a data protection perspective.
History
- When Facebook bought WhatsApp, Facebook wanted access to all its data. After considerable protest, Facebook backed down and promised never to seek access to WhatsApp data.
- Reports later emerged that WhatsApp was preparing to display advertising and enable shopping.
- In January 2021, WhatsApp introduced new terms of service. Under these terms, only users who had agreed to them would be able to use the service from early February. Following a moderate outcry, the deadline was extended to early May.
Frequently asked questions
The GDPR applies in Europe, so am I not protected from these terms?
That statement is correct in principle. The point, however, is that you have already agreed to the terms in any case. If a GDPR violation were to occur, it would be punishable, but the user would still have consented to the misuse. There is no need for paranoia, but the possibility that Facebook might accidentally disregard the GDPR and carry out the announced misuse of data unfortunately cannot be dismissed.
Why should I switch now? Do the changes not take effect until early May?
That is correct, but the changes will take effect. Since the problem is already foreseeable, it is better to act sooner rather than later.
I have so many contacts on WhatsApp. Why do I have to delete the app?
You do not have to delete the app, but you do need to understand what happens to your data. Many people have already switched to other messengers or at least installed a second or third messenger. You should therefore also install one or more additional secure messengers, inform your contacts and encourage them to switch to another messenger. Once enough contacts have moved to a secure messenger, you can still uninstall WhatsApp.
I do not even have a Facebook account, so I am safe, right?
Unfortunately not. Facebook also creates profiles for users who do not have a Facebook account. If you do not want Facebook and third parties to process and analyse your data, you should delete your Instagram, WhatsApp and Facebook accounts. Unfortunately, deactivation is not enough.
The internet already knows everything about me anyway. Why should I take action in this case?
Some providers already know a great deal about you: Google, Apple, Facebook, Amazon and certainly others as well. You decide how much data you share with these providers. The overriding principle is data minimisation: ask yourself which information a provider absolutely needs from you and disclose only that information. In short, the internet does not already know everything about you, and you should take action every time.
The others are no better either. Why should I install another app?
There are better messengers, and installing another app takes little effort. Once you have read about the security measures other providers take to protect their users against attacks and data misuse, you can see for yourself.
Messages are transmitted in encrypted form. What data do they want to transmit?
Apart from the messages, which are end-to-end encrypted, WhatsApp has access to metadata. This includes
- message history (Who messaged whom and when? Who belongs to which group?)
- contact details (name, phone number)
- location data (GPS) and
- status images
Alternatives
There are messengers considered secure; all of them are more secure than WhatsApp. We will not provide a complete analysis of the competitors here, as that would go beyond the scope of this article. However, there are plenty of articles online discussing the technical, organisational and other differences between the various messengers. Below, we will list just a few of the main features.
Threema
Threema is developed and offered by a Swiss company. The app costs money but offers a very high level of protection.
It is particularly popular with users who place great importance on security and data protection.
| Advantage | Disadvantage |
|---|---|
| - High level of data protection | - Paid app |
| - Provider in a third country considered safe in terms of data protection | - Takes some getting used to |
| - Anonymous user account possible |
Signal
Signal looks very similar to WhatsApp, which makes it popular with people switching services.
Signal is also widely used in education and by non-profit organisations.
| Advantage | Disadvantage |
|---|---|
| - High level of data protection | - Provider in a country where the GDPR does not apply |
| - Easy to get started | - Phone number required as an identifier |
Telegram
Telegram has been very popular for some time, partly because it offers powerful group chat features.
Telegram was also one of the first messengers to offer sticker packs.
| Advantage | Disadvantage |
|---|---|
| - Good level of data protection | - Provider in a country where the GDPR does not apply |
| - Powerful group features | - Unclear ownership |
| - Anonymous user accounts | - Unclear development and strategy |
| - All messages are stored on Telegram servers | |
| - All group messages are always transmitted without encryption. Only "Secret Chat" is end-to-end encrypted, and it is not the default setting. |
For security and data protection reasons, we cannot recommend Telegram without reservations.
Wire
Wire is very secure and transparent but not widely used, and the app takes some getting used to.
If you enjoy trying things out, you should definitely try Wire as well.
| Advantage | Disadvantage |
|---|---|
| - Good level of data protection | - Limited adoption |
| - High transparency | - Takes some getting used to |
What now?
If you absolutely have to send status updates to your friends, you have no choice but to keep using WhatsApp. Joking aside, there is life without WhatsApp. It is up to you to take the first step and install another messenger. You can then tell all your contacts that using WhatsApp violates the GDPR and persuade them to use another messenger. Over time, you and your contacts can gradually phase out WhatsApp.
After a while, you will hopefully find that only a few contacts are still exclusively on WhatsApp. That is the time to seriously consider deleting your WhatsApp account for good. If you can, deleting your Facebook and Instagram accounts would be the logical next step.
You can use the hashtag #FCKZCK ("Fuck Zuckerberg") for the campaign. :)