7 ms·
Awesome-Privacy: Curated list of privacy-respecting services and alternatives
- autoexec 4y agoIt's a shame to see Signal in the list. They are collecting and permanently storing sensitive data in the cloud, and they lie about it in their privacy policy which they've refused to update. (https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 https://community.signalusers.org/t/can-signal-please-update...) Currently user's name, photo, phone number, and, worst of all, a list of all the people they contact in Signal are kept in the cloud. Their privacy policy still opens with "Signal is designed to never collect or store any sensitive information." but if I were a activist or a whistleblower I'd consider a list of everyone I've been in contact with highly sensitive. In fact, it's exactly the kind of data that Signal has bragged about not being able to provide to law enforcement because they never collected it in the first place, yet now they do. They also ignored the objections of their users who didn't want any data kept in the cloud and concerns about their security (https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 https://community.signalusers.org/t/proper-secure-value-secu...) At this point I suspect the refusal to update their privacy policy is a giant dead canary intended to warn people away from the service as loudly as they can.