← Hall of Shame
F

Privacy Policy Audit

WhatsApp

messagingmetaencryptionmetadataglobal
6,800
Word Count
27 min
Reading Time
0 min
Human Patience
9/10
Sneakiness

Translation Service

What They Say

WhatsApp's primary marketing claim is end-to-end encryption, and this claim is true: message content cannot be read by WhatsApp or Meta. The policy explains this clearly and has the technical credibility of Signal's underlying encryption protocol. They describe data sharing with Meta as necessary for service improvement and safety. The encryption headline is real.

What They Mean

The message content is encrypted. Everything around the message is not. Meta receives: who you message, how often, at what time of day, for how long, from where, on what device — for every one of your WhatsApp contacts. This metadata is, in practice, more valuable than the content. Intelligence agencies have publicly stated that metadata analysis is more useful than content interception. Meta knows your communication graph — your relationship with your doctor, your lawyer, your affair partner, your estranged family member — with precision that your message content would not provide. The 2021 policy update that triggered mass migration to Signal was not about encrypting content. It was about formalising this metadata sharing.

Worst Clause — Exhibit A

"We share information with Meta Companies. As part of the Meta Companies, WhatsApp receives information from, and shares information with, the other Meta Companies. We may use the information we receive from them, and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings."

Bureau Translation:

Every person you communicate with, every pattern of your communication, and every inference Meta can draw from it flows between WhatsApp and the broader Meta advertising infrastructure. The phrase 'help operate, provide, improve, understand, customize, support, and market' is a complete list of things a company does with data. This clause gives Meta permission to use your WhatsApp social graph for advertising purposes across all their platforms. The word 'and' in that list is working very hard.

Evidence Tags — Data Collected

Message metadata: who, when, frequency, durationContact list (uploaded to servers)Profile photo, status, and last-seen dataDevice identifiers and network informationBusiness messaging data (not end-to-end encrypted)Location if shared in chatsFull social graph of all your WhatsApp contacts

Bureau Verdict

"WhatsApp is a masterclass in the gap between what encryption means and what people think it means. Your messages are private. Your social relationships, communication patterns, and identity are not. The Bureau grades this F for the systematic exploitation of user trust in encryption as cover for extensive metadata collection, and for being the vehicle through which Meta collects intimate relationship data from 2 billion people who believe privacy is protected."

F

Overall Grade

Deceptively Reassuring

Frequently Asked Questions

Dark Patterns Documented

See the full Dark Pattern Encyclopedia for documentation of each technique.

Audited: 2026-03-20