WhatsApp in January 2021 updated its terms and privacy policy. As per the policy, if users do not accept the changes, their accounts will be deleted. The new terms of service took effect on February 8, 2021. As a result, many of WhatsApp users are looking for alternatives to WhatsApp. As per the new terms and privacy policy, WhatsApp will share its user data with not only Facebook, its parent company, but also with other companies owned by Facebook. WhatsApp messages are end-to-end encrypted. Facebook will not be able to see its users contents. However, WhatsApp collects a lot of other data which can be shared with its parent company. The new terms and privacy policy are abiding.
This ex parte decision of the platform raised public anger. Following the outrage of its users, WhatsApp issued a clarification, stating that the new update does not affect the privacy of the messages exchanged between family and friends. However, in some conditions, business messages which are different from messaging with family or friends could be read by Facebook and could be used for marketing purposes. Though the messages exchanged on this platform are end-to-end encrypted, still other user information, such as location, group details, status, etc., can be accessed.
Another major concern is that WhatsApp backs iPhone user data on iCloud and Android user data in Google Drive. These are third-party applications, which are not encrypted, hence are accessible to hackers and government.
Encryption converts data to an unintelligible form, called ciphertext. When ciphertext is decrypted, the data returns into its original form, called plaintext.
WhatsApp has stated that the data shared with Facebook is used to help improve infrastructure, promote safety, and security and refine services by making suggestions or personalising features and content. This could also include integration between Facebook-branded products and WhatsApp.
In view of such vulnerable privacy issues associated with WhatsApp several messaging platforms, such as Telegram and Signal, have witnessed a huge surge.
Following are some of the alternatives to WhatsApp:
- Telegram
Ever since WhatsApp announced its latest privacy policy update, messaging app Telegram has seen huge downloads surpassing 500 million active users. Telegram has many features like WhatsApp. This messaging app has two-layer encryption—(i) Server-client encryption is used for Cloud Chats (private and group chats) and (ii) client-to-client encryption for secret chats. It is a freeware, cross-platform, video calling and Voice over Internet Protocol (VoIP) software. It was launched in 2013 by two Russian brothers—Nikolai Durov and Pavel Durov. The most popular feature of Telegram is the ‘secret chats’. These chats can neither be taken as screenshots nor can be forwarded to another user. Users can also delete messages by a self-destruct timer ranging from one second to a week. The app uses MTProto, Telegram Messenger encryption protocol, which contains a cryptographic layer that encrypts messages prior to being transmitted through the server. It is almost impossible to crack this protocol.
- Signal
Signal is a free, simple, and easy-to-use app, developed by the Signal Foundation, United States, a non-profit organisation, founded by cryptographer and privacy activist Moxie Marlinspike. It is available on all major platforms. Signal’s privacy policy is not as descriptive as that of Telegram and WhatsApp. However, unlike WhatsApp and Telegram, Signal uses open-source encryption. This means that security developers can test it for flaws and find bugs. Of all major messaging apps, Signal is arguably the most secure one. The chat history for the app is stored on the user’s device instead of any cloud server. In addition to messages, Signal supports disappearing messages, end-to-end encrypted group voice chats, and group video chats of eight users.
Due to the quality of the Signal’s protocol, it is used by a variety of third-party messaging apps to provide secure end-to-end encryption for messages including WhatsApp, Facebook Messenger, and Skype. Unlike WhatsApp and other third-party apps that implement the Signal protocol, the third-party providers send a verification code to the user’s phone number, when the user register, for the services. These providers are bound by their privacy policies to safeguard the privacy of information. If the user uses other third-party services (for example, YouTube, Spotify, Giphy, etc.), their terms and privacy policies govern their usage for those services.
- Spike
Spike is an E-mail application for Windows, MacOS, iOS, Android, and the web, which enables users to view E-mail in a chat-like conversational format, with additional features built-in. It is a software application that puts existing E-mails into a multimedia messaging, chat-like interface enhanced with video and voice calls. This is the most favoured app in the West. Spike was founded by Erez Pilosof and Dvir Ben-Aroya in 2013.
Spike claims to store only the minimum data needed to provide its users a better experience while using the app. It assures that it does not rent, sell, distribute, or monetise on user data to anyone. Once the user has signed up using their E-mail address, they may choose to enter their name or any other display name. If the user has subscribed their business account then they may enter payment information. The 3platform is strict on their minors’ policy. It does not knowingly collect any personal identifiable information from users below the age of 13. If any information is collected, then it will be deleted immediately.
Despite all the claims by Spike, some potential users of the app feel that periodically it collects user’s device number or IP address, location of the device on the internet, geographical location etc. It is said that Spike also monitors installation and online behavioural information recorded during user sessions and technical data, and related information apart from other technical information about the users’ device, applications installed on it, and operating system, etc.
This is a paid platform and comes with a variety of payment plans. However, the basic one is free with a limit of 15,000 messages.
- Session
This app does not require any user details like name, phone number, or E-mail ID. The Loki Foundation, an Australian non-profit tech group, is the developer of this app. Session claims that the messaging activity of its users leaves no digital trail. It creates a Sessions ID which has to be shared by the user to the contact person to start chatting. This app allows private group chat for up to 20 users.
Sharing of photos, voice snippets and other files can be done through this app. The company says that this app does not collect any geolocation data, metadata, or any other data about the device or network. It encrypts user messages using the Session Protocol which is a cutting-edge, end-to-end encryption protocol, built on libsodium, which is a highly-audited and widely trusted cryptographic library and is a portable, installable, and packageable version of NaCl (pronounced ‘salt’) which is a cryptography and networking library. Session is available for Android phones, iPhones, and desktops.
- Threema
Threema is a Switzerland-based app company. Switzerland follows very strong data privacy laws independent from the USA and the European Union (EU). It has its own server infrastructure, located in the country. All Threema’s apps use the open-source NaCl cryptography library for end-to-end encryption of all communications, and all have been recently audited (in 2020) by security professionals.
The app allows text and voice messages, voice and video calls, file-sharing, and group chats. It also has a built-in poll feature in group chats. All the chats are end-to-end encrypted. Threema user receives a random Threema ID for identification and phone number and E-mail ID of the user are not required to use this app.
This app can be installed and used on desktops and tablets as they can be used without SIM cards. This is a paid app and does not have many design themes to choose from but promises excellent security and privacy for the price paid.
- Viber
Viber is a popular free app like Telegram. Founded and owned by Japanese MNC Rakuten, it was launched in 2010. This app has user concentration in certain regions like Europe, the Middle East and North Africa (MENA region). It allows end-to-end encryption.
WeChat is a very popular app with more than 1.3 billion users in the world. It is the go-to-messaging app in China. Its user interface is similar to that of WhatsApp. However, considering the data privacy issues of apps, owned by the Chinese companies, WeChat may not be an option for users who are looking out for a WhatsApp alternative.
- Wire
Wire was founded by Skype co-founder Janus Friis. It uses end-to-end encryption and is a secure app. It is available on both Android and iOS platforms. However, since it is not very popular yet, the users might have difficulty using it if their contacts are not using the app too.
Conclusion
WhatsApp’s new privacy policy applies to every country, including the US, and users will have to accept the terms and conditions to continue using its service. But certain countries including the European Union (EU) have user friendly mechanisms in place.
While there is data sharing with Facebook even in the EU, users there have much more control. It is because EU has a very stringent privacy policy on any software product as compared to the rest of the world. EU’s General Data Protection Regulation (GDPR) is one of the strictest policies in the world and ensures that consumers have the full rights on their data and how that data is processed, and can even demand deletion or removal of information. So, WhatsApp’s own policy for EU consumers includes the right to access, rectify, port, and erase your information, as well as the right to restrict and object to certain processing of your information.
It should be seen that moving away from WhatsApp by opting for other messaging apps is not that simple.
The biggest advantage of WhatsApp is that it is widespread and everyone on any person’s contact list can use it. It has helped its parent company Facebook to dominate the social media and messaging space for more than five years.
Switching to another user-privacy protected app would make sense only if an entire group decides to move. Leaving WhatsApp means not to use any of its sister concerns. If a user quits WhatsApp, but still continues to use Facebook services such as Messenger, Instagram, and Facebook itself, then the exercise would be pointless.
© Spectrum Books Pvt. Ltd.