Newsday columnist and tech expert Mark Lyndersay was asked to explain what this means for users of the highly popular messaging platform.
He said the new policy maintains the end-to-end encryption that was an early value-point for the messaging service, but cracks open data collection to an alarming degree, bringing the messaging service more in line with the information mining systems that have powered Facebook’s market dominance.
It is a formalisation of changes to WhatsApp that have been in progress since it was bought by Facebook in 2014. Lyndersay said that back then, the company offered its users a one-time opportunity to opt out of data collection in 2016, when information-sharing with the parent company was introduced.
The option was not widely circulated and generally ignored because of residual goodwill earned by the service. It is no longer available to users outside of the European Union, which is governed by robust data protection laws (GDPR).
Gadget 360 published a full list (http://ow.ly/vfIs30rs2Ba) of user information gathered by the company’s products WhatsApp and Facebook Messenger.
Both products track fine details of their users, including a history of purchases, the device used, phone numbers, locations, e-mail address, the products users interact with and content produced within the app. In a statement to The Verge, Facebook sought to clarify the intent of the policy change.
“While most people use WhatsApp to chat with friends and family, increasingly people are reaching out to businesses as well,” the company said.
Facebook continues to insist that it cannot view the content of users’ messages, which are still protected by end-to-end encryption. WhatsApp uses Curve25519 encryption with a 128-bit security profile and a 256-bit key size. It is a public-domain algorithm.
Facebook bought WhatsApp in 2014 for US$16 billion, but by 2018, both WhatsApp co-founders Jan Koum and Brian Acton had quit the company, with Acton’s abrupt departure costing him US$850 million in vested stock.
Later that year, Acton started the #deletefacebook hashtag in the wake of revelations about Cambridge Analytica’s misuse of harvested data from the platform. The co-founders of Instagram, Kevin Systrom and Mike Krieger, also left the company in 2018 after selling their service to Facebook.
“No one ever leaves a job because everything’s awesome,” Systrom said at the Wired 25th Anniversary Summit in October 2018. Neither Systrom nor Krieger has ever spoken in detail about the issues that led to their departure.
Facebook is a digital advertising company that relies on user-generated content to build traffic and increase views of paid advertisements and sponsored posts.
There has been a surge in interest in more aggressively secure messaging platforms, principally Signal and Telegram, which collect only the data required to make a messaging connection.
Acton joined the Signal foundation in 2018 as executive chairman and invested $50 million in the business. Signal retains only the user’s phone number and does not associate it with their identity. Telegram stores contact information, contacts added to the software, and user ID. Both are available for most mobiles and desktop and support synchronisation.