Compared to the previous policy updates introduced in July 2020, the new privacy rules include additional user data to be collected by WhatsApp and more detail on personal information shared with Facebook companies and other third-party service providers.
Since being acquired by Mark Zuckerberg’s Facebook, WhatsApp has been heavily criticised about how it handles user data. Inside disputes over data privacy had been brewing between WhatsApp founders and Zuckerberg, culminating in co-founder, Brian Acton leaving the company in 2017 and former CEO Jan Koum quitting a year later.
With over 2 billion users across 180 countries and more than 5 billion downloads on the Google Play Store, WhatsApp has established itself as the most used messaging app globally. But protecting users’ privacy seems secondary to making money for Zuckerberg and his team.
In an exclusive interview with Forbes, WhatsApp co-founder, Acton had said: “I sold my users’ privacy to a larger benefit. I made a choice and a compromise. And I live with that every day.”
New Privacy Rules In Light of WhatsApp Data Security
Together with obtaining extra data such as battery level, hardware model, signal strength and operating system information, WhatsApp will share user data including account registration details such as your phone number and mobile operator as well as transaction data, IP address and mobile device information with other Facebook companies (Instagram, Oculus, Threadsy etc).
With Facebook’s history of cases involving alleged data misappropriation, all these are sensitive personal information which, if they get into the wrong hands, would expose users to possible danger.
Data breaches could occur, and WhatsApp is particularly susceptible. Last year, a cybersecurity breach on the messaging app put over 1 billion users at risk of data infringement by malicious spyware, compromising user security for the hours it lasted.
Sharing such personal details with other Facebook companies (which are not 100% secure) increases the chances of user data being leaked to cybercriminals, who could carry out nefarious activities such as bank fraud and blackmail.
On location data, you will not be able to share location with WhatsApp contacts unless you grant the app permission to collect location data from your device, which is necessary for you to use the feature. But according to the new policy, even if you do not use the location-sharing feature, WhatsApp would use IP addresses and other information like phone number area codes to estimate your general location.
Security Analysts say WhatsApp can be easily hacked through spyware apps. For this reason, several users would rather not have their location data mandatorily gathered (despite not sharing location) because malware could later track it to WhatsApp’s database and collect sensitive information on where people live or work.
Added to this, the policy indicates that when users share any information on WhatsApp business, the data may be available to all associated third party service providers engaged by that business.
If a data breach occurs, leaked confidential company information could jeopardise reputation and cause great financial damage.
WhatsApp Users May Consider Alternative Messaging Apps
Endorsed by the world’s richest man, Elon Musk, Signal is now widely considered as being the most secure messaging app with respect to user data privacy. Chaired by WhatsApp co-founder, Brian Acton, Signal does not collect or store any sensitive user information, according to its privacy rules.
Get the best of Africa’s daily tech to your inbox – first thing every morning.
Join the community now!