WhatsApp

User privacy: Collects and shares meta data, while competing apps intentionally collect less to avoid incursions on their users' privacy.^[1]

Market control: The combination of Facebook, WhatsApp, and Instagram, all owned by Meta, serves billions of active users.^[2]

This is a list of all consumer protection incidents in which this company is involved. Any incidents not mentioned here can be found in the WhatsApp category.

There are several instances of data lock-in in WhatsApp. For example, if WhatsApp staff suspends an account, the user is unable to access any messages stored on their device, unless they successfully appeal their suspension. This means WhatsApp staff has greater access to some of the data stored on devices of WhatsApp users than the device owners themselves. Such practices function similarly to ransomware, a type of malware attack in which a user in unable to access some or all of their data on a device until a ransom is paid.^[3][4]

Users are also unable access to their messaging history if they do not run a recent version. This means that users cannot read existing messages until an update has been completed. There are situations where users may not be able to update. These include being at a remote location with limited Internet access, exhaustion of one's mobile data plan, and having an older device where updating is not possible anymore because its operating system is no longer supported by a recent version of WhatsApp.

If a WhatsApp user has not used the service for four months, they are required to repeat the registration process before being able to access to their message history.^[5] In addition, changing one's phone number means losing access to all existing messages that were not backed up in advance.

WhatsApp also lets the user back up their messages to their Google account, but they are stored in a way they can only be accessed from WhatsApp, not externally.^[6]

WhatsApp provides a chat exporting feature which allows to export the entire chat history as a text file, optionally including media attachments, into a ZIP file. However, there is no way to export all messages at once. It has to be done for every contact and every group individually. Additionally, starting with an April 2025 update, exporting can be remotely disabled by the other participant through the "Advanced Chat Privacy" feature.

There are legitimate reasons for exporting chats, such as creating backups in a human-readable and non-proprietary format, preempting erroneous account terminations^[7], searching using external tools, and preserving good memories with people, including those of deceased individuals.^[8]

The developers of WhatsApp have threatened to block screenshots inside chats with "advanced chat privacy" enabled:^[9]

The company has stated that this is the first iteration of the feature, with plans to introduce even more robust protections in future updates, potentially including measures to block screenshots.

WhatsApp requires users to use updated versions of the app by first giving them an in-app warning if they have not updated for a while. If the user still chooses not to update, usage of the app will be disabled entirely.^{[citation needed - How long before this happens? Any screenshots?]} This can pose problems in certain cases, such as being in an area with poor or limited internet connectivity or using an older device that is no longer supported.^[10][11]

Since late 2017, WhatsApp allows message senders delete messages for a limited duration after sending.^[12] This time limit was extended, to slightly over an hour in 2018^[13] and two and a half days in 2022.^[14] While there is a message noting that "This message was deleted," it is not possible to see what was contained in the message.

Additionally, since 2023, WhatsApp lets message senders edit messages for up to fifteen minutes after sending. When a message is edited by the sender, while it is noted the message has been edited, the recipient can no longer see the original message.^[15]

In effect, this WhatsApp feature allows the sender to remotely delete or edit existing information on the recipient's device without the consent of the recipient.

Main article: WhatsApp updates privacy policy and millions of users flee the platform

There was widespread backlash over an upcoming privacy policy update related to the data-sharing procedures with Facebook. It outlined how businesses that use WhatsApp for customer service may store logs of their chats on Facebook servers.^[16] The update sparked a broader concern, prompting millions of users to abandon the platform.^[17]

WhatsApp also introduced "view-once" messages in 2021 and disabled screen captures of them in 2022. "View-once" messages are deleted after being viewed.^[6]

In March 2024, WhatsApp started disabling screen captures of profile pictures viewed in full screen to "protect the privacy" of its users. This made possible because mainstream mobile operating systems, Android and iOS, let applications disable screen capturing on devices without the consent of the of device owners.^[18]

Profile pictures are not mandatory to use WhatsApp and are therefore images that a user has voluntarily made accessible on their profiles. As such, profile pictures are not private images.

In June 2025, Meta announced that personalized ads would be introduced globally on WhatsApp.^[19] Previously, Meta (then known as Facebook) stated in 2014, after it acquired the application:

("[...] And you can still count on absolutely no ads interrupting your communication.").^[20]

The personalized ads also utilize data from linked accounts on other Meta platforms.^[21]

• Signal offers most of the same features, and while not without some issues, the app is open source, relies on Privacy by Design, and is operated by a non-profit.

• Matrix is more private and uses a federated design, but setup is slightly more involved than that of a commercial messenger.

• Telegram is the most popular alternative and is end-user-friendly, with minimal content moderation. Prior to a September 2024 policy change, it refused to hand over user data to law enforcement upon request.^[22]