If Signal Is So Hot on Privacy, Why Did It Tell Everyone I Joined?

Barry Collins
The Startup
Published in
2 min readJan 27, 2021

--

Man in spotlight
You can’t quietly join Signal (Photo by Ahmed Hasan on Unsplash)

Signal is enjoying a surge up the app charts at the moment, as people flock from Facebook-owned WhatsApp, amid uncertainty about how much WhatsApp data is being fed to the mothership.

Signal is laying it on thick with the privacy message. The app is listed as Signal Private Messenger. “Signal’s advanced privacy-preserving technology is always enabled,” the first paragraph of its Google Play Store listing reads.

“Privacy isn’t an optional mode — it’s just the way that Signal works,” it adds in the next paragraph. OK, we get it. Put down the sledgehammer.

Except… there’s a Signal feature that’s not very private at all: the fact that it broadcasts to all of the people in your phone book that you’ve joined Signal when you first sign up.

Signal sends out a notification whenever one of your contacts joins

Signal — like WhatsApp — uses your phone number as your identifier. When you sign up for the service, it sucks in your phone book so that it can identify other Signal users you might want to chat with.

But that makes the rather large assumption that everyone in your phone book is a trusted contact. My mobile phone contacts include…

--

--