WhatsApp's end-to-end encryption is genuine — the Signal Protocol implementation is well-audited. The problem is everything around the encryption: who you talk to, how often, from which device, and what that data means to Meta's advertising business.
Two billion people use WhatsApp. That makes it the default option for most of the world outside the US and China — and the reason most people stay isn't comfort with Meta's privacy practices, it's that leaving means losing access to most of their contacts.
This is a real problem worth naming honestly: the best private messenger in the world is useless if no one you know uses it. Any realistic evaluation of WhatsApp alternatives has to grapple with the network effect problem, not just the technical properties of the encryption.
What WhatsApp Actually Collects
First, the correct framing. WhatsApp's message content is end-to-end encrypted using the Signal Protocol. Meta cannot read your messages. When someone claims otherwise, they're wrong.
What Meta can collect, and does collect, is metadata:
- Who you communicate with, and how frequently
- When you're active (last seen, online status)
- Your device identifiers, IP address, and location data (coarse)
- Your phone number and contact list (uploaded on first run)
- Usage patterns: how often you open the app, for how long
- Group memberships — who you're in a group with reveals your social graph
The 2021 privacy policy update that triggered mass migration to Signal and Telegram was primarily about business accounts and integrating WhatsApp data more tightly into Meta's advertising infrastructure. The metadata collection described above existed before that update and continues.
The metadata distinction: Intelligence agencies have historically argued that "metadata is more valuable than content." Knowing that you called a particular lawyer, a particular oncologist, and a particular journalist on the same day tells a story that the content of those calls might not. Metadata is not a minor privacy footnote.
The Alternatives, Honestly Evaluated
Signal
Signal is the most technically defensible private messenger available. The Signal Protocol is the gold standard for 1:1 and group message encryption. Sealed Sender hides who is messaging whom even from Signal's servers. The organization is a nonprofit; there's no advertising business model to monetize your data.
The limitation is identity: Signal requires a phone number. Your Signal identity is permanently linked to a phone number, which is linked to your carrier, which is linked to your real name in most jurisdictions. Signal has introduced usernames as a way to avoid sharing your number with contacts, but registration still requires a phone number at the SIM level.
Best for: Personal use where you're replacing SMS/iMessage. Migration is easier than any other alternative — the UX is closest to WhatsApp.
Limitation: Phone number identity requirement. Adoption is lower than WhatsApp in most non-US markets.
Telegram
Telegram is frequently cited alongside Signal as a "private" messenger, which creates significant confusion. They are not equivalent.
Telegram's default chats — including all group chats — are not end-to-end encrypted. They are encrypted in transit (client to server and server to client), but Telegram holds the keys and can read the content. Only "Secret Chats" are end-to-end encrypted, and Secret Chats are not available in group settings.
Telegram's founder Pavel Durov was arrested in France in August 2024 and faced charges related to content hosted on the platform, which led to a significant shift in the company's content moderation policies.
If your reason for leaving WhatsApp is privacy, Telegram is not the answer for sensitive communications.
Best for: Large communities, public channels, file sharing. Not for private communications.
Limitation: Default chats are not end-to-end encrypted. Treat it like a semi-public forum.
iMessage (for Apple users)
iMessage provides end-to-end encryption between Apple devices. The main caveat: iCloud Backup can undermine iMessage encryption if enabled, because backup keys are held by Apple and accessible to law enforcement. Apple's "Advanced Data Protection" (opt-in) encrypts backups end-to-end, but requires deliberate configuration and is not on by default.
iMessage is also Apple-only. SMS fallback (green bubbles) is unencrypted.
Best for: All-Apple households or teams.
Limitation: Apple-only. iCloud Backup disabled or Advanced Data Protection required for full encryption benefit.
Matrix / Element
Matrix is a federated, open-source messaging protocol. Unlike Signal or WhatsApp, there's no single company running the servers — you can host your own Matrix server or use a public homeserver. End-to-end encryption is available (MLS support in development).
Best for: Technical teams, organizations that want to self-host, developers.
Limitation: UX complexity. Non-technical users will struggle.
Haven
Haven uses email as its identity layer — no phone number required. Real-time chat uses the MLS protocol (RFC 9420) — the same standard that major messaging platforms are converging toward for group encryption. Messages are end-to-end encrypted; Haven cannot read them.
The identity model has a meaningful privacy advantage over Signal: no phone number means no link to your carrier, no SIM, and no phone registration paper trail. You sign up with an email address and a passphrase.
Best for: Users who want email and chat under one identity, without a phone number requirement.
Limitation: Smaller network than Signal or WhatsApp.
Side-by-Side Comparison
| App | E2E Encrypted | Phone Number Required | Metadata Collection | Open Source |
|---|---|---|---|---|
| Yes (content) | Yes | Extensive | No | |
| Signal | Yes | Yes | Minimal | Yes |
| Telegram | Secret Chats only | Yes | Moderate | Clients only |
| iMessage | Yes (Apple↔Apple) | Yes (Apple ID) | Moderate | No |
| Matrix | Yes (opt-in) | No | Minimal (self-host) | Yes |
| Haven | Yes | No | Minimal | Partial |
The Network Effect Problem
The biggest factor in this decision isn't the comparison table above — it's who you need to reach. A few strategies that work:
- Lead with a specific group. Instead of asking everyone to switch, start with the people you communicate with most. One group on Signal is more valuable than a vague intention to move eventually.
- Don't delete WhatsApp. Keeping WhatsApp for contacts who won't switch doesn't undermine your privacy for the contacts who do. Compartmentalization is valid.
- Point to specific incidents. The 2021 policy change and documented metadata sharing cases are concrete. Specific incidents sometimes move people; abstract privacy arguments rarely do.
What We'd Recommend
For most people: Signal. It has the best combination of strong encryption, usability, and adoption in privacy-conscious circles. The phone number requirement is a real limitation, but it's not a dealbreaker for most threat models.
If you specifically want email-based identity and don't want to link your messaging to a phone number, Haven solves that problem — and the unified email-and-chat model reduces the app fragmentation that makes "private communication" operationally exhausting.
Avoid Telegram as a private messenger. It's a good platform for communities and channels, but its default encryption model is not appropriate for sensitive communications — and conflating it with Signal has led to real privacy failures.
Whatever you choose: the fact that you're evaluating your options means you're already ahead of the vast majority of people still sending unencrypted SMS and letting Google read their email. Perfect is the enemy of good.
This post was originally published on the Haven Blog. Haven is an end-to-end encrypted messenger that uses email as your identity — no phone number required.
Top comments (0)