(optional mobile number sent to third party for registration) (mandatory mobile number sent to third party for registration & recovery) (User data is sent to a third party if a payment is made) User data and/or metadata sent to parent company and/or third parties? Location / identifiers / purchases / location / contact info / contacts / identifiers / usage data / user content / usage data / diagnosticsĬontact info / identifiers / usage data / diagnostics (Information not submitted to Apple Store) (Contact info not sent when using anonymously) Health & fitness / purchases / financial info / location / contact info / contacts / user content / search history / browsing history / identifiers / usage data / sensitive info / diagnostics / other data (Difficult to assess given the app is integrated into Apple's greater ecosystem) (Difficult to assess given the app is integrated into Google's greater ecosystem) Janus Friis / Iconical / Zeta Holdings Luxembourg / Rakuten / friends and family of Talmon Marco (it's very unclear) Surveillance capability built into the app?ĭoes the company provide a transparency report?Ĭompany's general stance on customers' privacyįreedom of the Press Foundation / the Knight Foundation / the Shuttleworth Foundation / the Open Technology Fund / Signal Foundation (Brian Acton) Implicated in giving customers' data to intelligence agencies? Messages: Worldwide (uses de-centralised servers)Īttachments: Centralised server in Canada

USA, the Netherlands, Australia, Brazil, China, Ireland, Hong Kong, and Japan UK (and potentially all jurisdictions, given it's a decentralised messaging platform) USA (Ireland and Denmark planned) iMessage runs on AWS and Google Cloud Worldwide (rollout on-going, unsure of exact locations, most likely Google Cloud regions) Messages can be read by Facebook if marked as 'abusive'įormer NSA chief Keith Alexander is on Amazon’s board of directorsįurther limit metadata storage and logging Implement perfect forward secrecy at the end-to-end encryption layer Provide more comprehensive independent assessments of security/privacy Remove the mandatory requirement for users to sign up with a mobile number No independent & recent code audit and security analysis Named as NSA partner in Snowden revelationsĭata not protected, not all data protected Improvements to apps that are recommended Main reasons why the app isn't recommended Is the app recommended to secure my messages and attachments?

Viber messenger wiki