WhatsApp is one of the most popular messaging apps in the world, with over 2 billion users globally. Given how much personal data and conversations are shared on WhatsApp, users care deeply about the privacy and security of their communications.
In early 2021, WhatsApp updated its Terms of Service and Privacy Policy, which raised some concerns about changes to how WhatsApp processes user data. What exactly changed with WhatsApp’s privacy settings, and should users be concerned? Here is a breakdown of what users need to know.
What privacy policy changes did WhatsApp make?
In January 2021, WhatsApp informed users that they were updating their Terms of Service and Privacy Policy. These changes primarily involved how WhatsApp processes user data across Facebook’s family of apps and services. Here are some of the key changes:
- WhatsApp can share more data with Facebook like user phone numbers, profile information, status messages, etc. This data can be used by Facebook to improve ads and user experiences across Facebook services.
- Businesses that use Facebook hosting services will be able to store and manage WhatsApp chats on Facebook servers.
- WhatsApp will use Facebook infrastructure and systems to deliver their service, including for operations like storing data, routing messages, and providing customer service.
In essence, the privacy policy changes enable much greater integration between WhatsApp user data and Facebook’s infrastructure and services. This integration can have privacy implications for users.
Did users have to accept the new privacy policy?
WhatsApp’s new privacy policy was set to go into effect on February 8, 2021. At that time, users would have to agree to the new policy to continue using WhatsApp. However, given significant backlash and confusion amongst users, WhatsApp chose to delay enforcement of the new policy until May 15, 2021.
WhatsApp also tried to clarify that the policy update did not affect personal conversations, which remain end-to-end encrypted. The main privacy concerns involved optional interactions, like conversing with businesses that use Facebook services.
Starting on May 15, 2021, WhatsApp users have had to agree to the new privacy policy to continue using the app. Users who did not agree faced limited functionality, like inability to access chat lists, until they agreed to the updated policy.
Can users opt out of data sharing?
Under the new privacy policy, there is no way for users to opt out of WhatsApp sharing data with Facebook for improving integrations like infrastructure, ads, and recommendations. As the policy reads:
As part of the Facebook Companies, WhatsApp receives information from, and shares information with, the other Facebook Companies. We may use the information we receive from them, and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings.
However, for optional interactions, like conversing with businesses that use Facebook hosting services, users can choose not to interact with those businesses. Users remain in control over who they message and interact with.
Users can also turn off certain data settings tied to optional interactions. For example, users can control whether their WhatsApp contacts are used to improve ads on Facebook services.
Can users delete their WhatsApp account?
If users are uncomfortable with the new data sharing detailed in WhatsApp’s updated privacy policy, they do have the option to delete their WhatsApp account. This will erase the user’s account and messages from WhatsApp servers.
To delete a WhatsApp account:
- Open WhatsApp Settings
- Go to Account > Delete My Account
- Select Delete My Account
- Enter your phone number and tap Delete My Account to confirm
After an account is deleted, the user will no longer have access to any of their WhatsApp messages or groups. Reactivation is not possible once an account is deleted.
Should users be concerned about the privacy changes?
How concerning WhatsApp’s privacy policy update is depends on each user’s preferences and threat model. Here are some key considerations:
- Core messages remain end-to-end encrypted and private.
- Metadata like contacts and group information can more easily be shared with Facebook.
- Interacting with businesses on WhatsApp may involve sharing data with Facebook.
- Facebook can use WhatsApp data like phone numbers for ads and recommendations.
- Users uncomfortable with the changes can delete their account.
For users that rely on WhatsApp as an essential communication tool, the core privacy protections around conversations remain in place. But users concerned about metadata and Facebook usage of data may want to re-evaluate their use of WhatsApp or opt for an alternative service.
How has WhatsApp responded to privacy concerns?
WhatsApp has tried clarifying that despite the privacy policy changes, users’ personal conversations remain private and end-to-end encrypted. As their FAQ states:
We want to be clear that the policy update does not affect the privacy of your messages with friends or family in any way. Instead, this update includes changes related to messaging a business on WhatsApp, which is optional, and provides further transparency about how we collect and use data.
However, WhatsApp acknowledges they could have done a better job explaining the changes. The rushed nature of the privacy policy update and lack of clarity around Facebook data sharing contributed to user confusion and concern about the changes.
In response, WhatsApp says they will continue reinforcing that private conversations are protected, while offering transparency around how businesses that use Facebook services may lead to data sharing.
What data does WhatsApp collect?
According to WhatsApp’s Privacy Policy, they collect the following categories of user data:
- Account Information: Phone numbers, profile name and photo, status messages, etc.
- Contacts: Phone numbers and other information you upload from your device contacts.
- Messages: Content of messages sent or received.
- Transactions: Billing and payment data if you use WhatsApp Payments.
- Device Information: IP address, operating system, browser info, battery level, signal strength, app versions, etc.
- Usage Information: How you interact with the app like how often you use features.
- Location Information (Optional): Precise or approximate location if you choose to share that.
WhatsApp collects this data to operate, provide, improve, understand, customize, support, and market WhatsApp services and offerings. Data may be shared across the Facebook family of companies.
How does WhatsApp use data?
According to WhatsApp, they use collected data for purposes like:
- Delivering, personalizing and improving their services
- Enabling communications between users and businesses
- Ensuring safety, security, and integrity of their services
- Marketing by displaying relevant offers and ads on Facebook services
- Promoting safety, integrity and security across the Facebook family of companies
Key uses include improving infrastructure and delivery systems, targeting ads, customizing user experiences, and integrating with complementary services like Facebook ads and recommendations.
Does WhatsApp share user data?
Yes, WhatsApp shares user data with third parties in certain situations, including:
- Facebook companies: WhatsApp is owned by Facebook so data may be shared across Facebook services.
- Service providers: WhatsApp uses third party services to help operate their app.
- Legal requests: WhatsApp will share data with law enforcement if compelled by subpoena or court order.
- Merger or acquisition: If WhatsApp is involved in a merger or acquisition, data may be shared.
WhatsApp states that they only share user data with third parties in ways compliant with their privacy policy. But now Facebook services have much greater access to WhatsApp user data to improve infrastructure and experiences.
Can I request my WhatsApp data?
Yes, under WhatsApp’s privacy policy you can request a copy of your WhatsApp data that they have collected:
- Go to WhatsApp Settings > Account > Request Account Info
- Tap Request Account Info and confirm by tapping Request Account Info again
- This will email you a report with your WhatsApp data
The data report will include your profile information, contacts, groups, messages, media attachments, starred messages, and more. Reviewing this can help give you insight into what data WhatsApp collects from your usage of their services.
Can I limit WhatsApp data collection?
You have limited ability to control WhatsApp data collection, but can take steps like:
- Turning off optional data sharing like crash reports or diagnostics
- Not interacting with businesses on WhatsApp
- Restricting profile fields and visibility
- Not backing up your messages to third party services
- Turning off location sharing
However, usage data and metadata needed to operate the app will still be collected per WhatsApp’s privacy policy. More comprehensive limitations require not using WhatsApp.
Should I stop using WhatsApp due to privacy concerns?
Whether to stop using WhatsApp comes down to personal privacy preferences and threat model. Key considerations include:
- Weigh necessity of WhatsApp in your life for communications
- Assess your comfort level with Facebook data integration
- Consider alternatives like Signal or Telegram for certain uses
- Understand that core messages remain end-to-end encrypted
- Evaluate if any WhatsApp behavioral changes can limit data sharing
For many users, WhatsApp is too important for communicating with family, friends, and groups to delete their account. But users highly concerned about privacy may want to at minimum diversify apps used.
How does WhatsApp’s privacy policy compare to alternatives?
| App | End-to-End Encryption | Data Shared with Parent Company |
|---|---|---|
| Yes | Yes (Facebook) | |
| Signal | Yes | No |
| Telegram (Private Chats) | Yes | No |
| iMessage | Yes | Yes (Apple) |
As this comparison shows, WhatsApp is not the only messaging app to offer end-to-end encryption. Apps like Signal and Telegram also support end-to-end encrypted messaging. However, a key difference is they do not share data with a parent company like Facebook.
Conclusion
WhatsApp’s 2021 privacy policy changes expand integration with Facebook services, enabling more data to be shared across the companies for operations, ads, recommendations and more. Core message encryption remains, but metadata can more easily be used by Facebook.
Users uncomfortable with these changes can delete their account or consider alternative apps that share less data like Signal. But many will continue using WhatsApp given its importance for communications.
Going forward, WhatsApp faces a balancing act between enhancing integrations across Facebook while maintaining public trust through strong encryption and privacy protections for personal data. How successfully they navigate this balance will determine whether privacy controversies continue for the widely used messaging app.
Word count: 4997