Latest Privacy Controversy Shows WhatsApp Must be Transparent

In this commentary, the speaker outlines the latest privacy controversy surrounding WhatsApp’s policy change that mandates sharing user data with its parent company Facebook, emphasizing that the real concern is the aggregation of metadata rather than message content. The discussion compares privacy protections in the United States, California, and the European Union, noting the EU’s stronger regulatory framework. The speaker highlights the resulting user backlash, including mass migrations to privacy‑focused messaging apps such as Signal and Telegram, and references public figures like Elon Musk urging the shift. The narrative explains how metadata aggregation enables detailed profiling, influencing advertising, news feeds, and personal behavior, and argues that such practices pose significant privacy risks. The speaker critiques WhatsApp’s response—an infographic that focuses on what data will not be shared while remaining vague about what will be shared—and calls for full transparency, proposing an open dialogue with privacy professionals to rebuild trust.
Chapters
There is trouble brewing again in the WhatsApp community with a new privacy controversy, and we've got users abandoning the platform in droves. We've got government reviews, um, that are cropping up all over the world, and there's a lack of clarity coming from this Facebook-owned social media company. So we're going to dive into it a little bit here. Okay, first thing is to understand WhatsApp is a social media platform. There are millions and millions and millions of users around the world that use this platform to communicate daily, and it is owned by Facebook. It was purchased by Facebook. And this privacy controversy, it's not the first one. There have been previous ones. In fact, back in 2016, they decided and they let users know, hey, we're going to start sharing information with our parent company, with Facebook, and users were concerned, right? Uh, rightfully so. But they put in there that you could opt out. Now, best industry practices, really, people should be opting in if you're potentially jeopardizing and exposing more private information. But at least they had the option. Recently, they've now come out and said, we are going to share your data. It's not optional. You can't opt out. And there's still some confusion here. It's definitely targeted the US. It may impact other regions including India and the EU, but again, um, other regions, especially the EU, they've got very strong privacy regulations, much more organized and unified and protective than that of the United States. In fact, in the EU, they actually have a right. Citizens there have a right to privacy. The United States doesn't have that. There's no federal mandate or Constitution, uh, amendment that says the people actually have a right to privacy. In fact, out of all the states, only one state in the United States actually has it written into its Constitution that privacy is a right, and that's California. And California has been a leader in kind of privacy advocacy for quite some time. But the people in Europe are probably going to be more protected in this case than the US citizens, so that's a concern. Now, given the fact that, you know, this new notice has come out, it has caused all sorts of backlash. Privacy advocates have been, you know, ringing the bells going, hey, you know, we said you should have moved from this platform for a while, but this again proves that you really need to be moving towards a more secure platform. Elon Musk even tweeted out, you know, hey, it's time to move to Signal, right? Signal is a competitor who also has end-to-end encryption and doesn't actually share data out to partners at Facebook or anything else. Telegram has also been mentioned, which also has end-to-end encryption, right, which secures communications between one point and another. But more importantly, it's not sharing or bleeding out other metadata as well. So, you know, people have other options. And I'm seeing on my accounts where a whole bunch more people are joining. So I'm getting the alerts, you know, that colleagues and friends are now joining Signal, for example, which is nice. So we're seeing this flood of people move because of this controversy. We're seeing the news cycle grab a hold of this, and all sorts of media outlets are talking about this. And in response, WhatsApp has actually come out with an announcement and they've said, okay, well, we're gonna put this on hold because there's some confusion here and really we're not doing anything bad. And they even made a nifty infographic here and you can read through it and basically what it talks about is what they're not going to do. Well, wait a second, why aren't you saying what you are going to do? We'll get into that in a minute. So what they're really focusing this counterargument about is potential concerns that the communication, the end-to-end communication, is somehow being compromised and all the individual messages between one person and another are going to be exposed to Facebook. Um, that's not the case. They've made that very, very clear. But in reality, that really isn't the issue. Right? If it was the issue, this would be even bigger. What's really the issue is about sharing the metadata. It's about sharing the information, for example, what merchants you're buying something from, what stores you're communicating to, how much you're spending, maybe even whether you're going into a physical store or not. All those kinds of metadata may be shared We don't know because WhatsApp actually isn't telling us what data is going to be shared. They're keeping it very vague and instead they just wanna kind of focus the conversation on this straw man of, well, no, the end-to-end communications are still secure between you and a private person. Not necessarily you and a business because especially if these businesses are using Facebook's new infrastructure platform, that may also be exposed. But even if they're not, there's probably a level— there certainly is a level of data exposure. So that becomes a real big problem, and we have to think about this in terms of privacy. Okay, for all the social media platforms or all the applications we use, the digital world, um, think of them as, as individual silos. And when we use them, they do gather data because they have to service us and know who we are and all the great But that becomes a privacy concern if they're collecting more data than they need to, or maybe they're sharing it or selling it, things of that sort. And that's bad. But what's even worse is when you have these silos starting to communicate with each other. And in the privacy world, we call that the aggregation of data. And that is tremendously impactful to the individual privacy of users. Because for one given app, they really only know one little aspect of your life, whatever that application or service is about. But when you start adding it to these others, a very rich profile is able to be built, one that understands what you like, what you don't like, who you're communicating with, who your friends are, what topics interest you, um, what things you click on and what you read, what stores you buy, how much money you have and spend. All those kinds of things can not only influence you to purchase things, which is one of the reasons that they gather this, right? They want to feed you appropriate ads and feed you ads that will trigger those things they know about you, right? But it also can shift your other behaviors, right? It can determine what news stories they want to feed you that you will trigger and, and, and read and maybe filter out other ones. Right? And whether the news stories are true or not, right, that has an impact on us, on what we believe and how we can be motivated, both in our personal, political, business, all aspects of our lives. And so when you have this aggregation across platforms, that becomes very dangerous. And you might not even think that, oh well, who cares if they know who I'm doing business with, or what I purchased there or how much I spent. That's hugely important. How much somebody spends can reflect directly back on how much money they make, how influential they are, right? Who their friends group are. If I convince this person, they may be able to influence others. You know, whether I'm walking into a store or not, they know how often you shop, where you shop, what you're, where you're at, maybe other stores that you're nearby. Things of that sort. Again, even the metadata is tremendously valuable, which is why Facebook wants it. Facebook and many other social media platforms, they build profiles of you, me, everybody, so that they know what's important to us, how active we are, how influential we are, what is our, our social background, our, our economic power, all those kinds of things. And this could contribute to that. But WhatsApp probably doesn't want to talk about that, right? But what they are saying is this is not a big privacy issue. They're saying this is where they're doing it to service their customers for the benefit of their customers. And maybe that's the case. I hope that's the case. But again, if it's not the case, then we kind of run into an unethical issue. Because they're choosing to hide the information that they're actually gonna start sharing. Instead, they want to talk about what they're not gonna share. Well, that really doesn't help anything. So it's really now about, let's prove that you're trustworthy. WhatsApp really needs to come out and to clearly specify this policy change will make the following data now available on a continual basis to Facebook. Let the privacy advocates look at it. And if, you know, WhatsApp, what you're saying is this is just to the benefit to be able to service, great. Because WhatsApp has a large group of privacy professionals. They do go out on LinkedIn. I've seen all sorts of names. They've already done this analysis. They already know the answer, whether it's a benefit or whether it's a detriment. Let's let the rest of the privacy advocates and security advocates out there also see what you're gonna be sharing and come to the appropriate conclusion because transparency builds trust. And you know what? If it is just for the benefit of the users and it's reasonable, that builds trust. You're actually gonna have privacy advocates advocating for you. If on the other hand you've chosen to go down a path where it's a detriment to your users, well, again, you're going to have privacy advocates and, and users be aware of that. So it really comes down to how transparent do you want to be. If you're doing things right and for the benefit, then you should have no issues in providing the information of exactly what metadata is being shared. If you knowingly are doing something to the detriment of your users, I have a feeling you're going to remain silent. You are going to fight to not be explicit in detailing what you're going to share. So it's really up to you. If you want to earn trust and you believe, you know, what you're doing is good, then there should be no issue with transparency. So the gauntlet's been thrown down. It's up to you, WhatsApp. My concern will be if it's silent. Because that in itself is very telling. I really hope that WhatsApp steps up and provides the information and the metadata and starts to communicate with the privacy professionals of the world to be able to have those open discussions. In fact, you know what? I will offer to do a video blog with the privacy professionals from WhatsApp, and we can have an open and honest conversation back and forth, and we can talk about it. And I'm sure I'm not the only one out there that would do that. So WhatsApp, the ball's in your court.
More from Matthew

The Future of Cybersecurity: How AI Is Exploiting Technical, Behavioral, and Process Vulnerabilities









