WhatsApp Messenger Security & Privacy Scorecard

Version: 26.10.74 (Build 912595971)
Scan Date: 2026-03-27
Security: 68/100 | Privacy: 38/100

What This Means for You

Usage patterns and activity are shared with Facebook Analytics, giving Meta direct visibility into how the app is used. Location data is collected through third-party services including Foursquare. Several other data partners receive information about user behavior, and user control over what gets shared remains limited.

Recommendation: Use With Caution

Best For: Staying in touch with friends and family
Avoid If: Meta tracking in-app activity is a concern

Key Findings

Data Security - 1 finding (1 medium)

Network Security - 3 findings (1 critical, 1 high, 1 medium)

Code Safety - 0 findings

Privacy - 7 findings (4 critical, 1 medium, 2 low)

Privacy Concerns

What Data is Collected

The app gathers data about user contacts, messaging habits, and usage patterns. Location-related data flows to Foursquare's services. Phone numbers are processed by Ipification for verification. Usage activity is reported to Meta's analytics platform, giving Meta a detailed picture of how and when users communicate.

Third-Party Data Sharing

Data is shared across multiple third-party partners:

• Facebook Analytics SDK - In-app behavior is reported directly to Meta.
• Meta AI (meta.ai) - Connected to Meta's broader AI infrastructure.
• Foursquare - Receives location-related information tied to user activity.
• Giphy and Tenor (Google) - Receive data when users search for or send GIF content.
• PsiphonTunnel VPN - Handles certain network routing for user connections.
• Ipification - Processes phone numbers for account verification.
• Cloudflare OHTTP Relay and Fastly OHTTP Relay - Network delivery partners involved in routing user data.

Understanding the Scores

Positive Security Features

• No standout security practices were identified for this version of the app.

Areas for Improvement

• Options to limit what gets shared with Meta and third-party partners are minimal, leaving most data flows outside user control.
• Multiple data partners receive behavioral information about user in-app activity, with limited transparency about how each partner stores or uses that data.
• Location data reaches third-party services, and the retention practices for that information are not clearly communicated to users within the app.

About This Analysis

This scorecard is generated from automated analysis of the app's code and configuration at the version listed below. Scores and findings reflect the state of the app at the time of analysis and may not capture changes introduced in later updates.

App Details