Key points:
Privacy Features and Data Handling
While Telegram may not boast the same level of privacy features as its competitor Signal, it does present a unique set of functionalities that could attract a diverse user base. As a cloud-based messaging service, Telegram retains the data necessary for its operations, including certain metadata such as IP addresses. In a notable shift, the company updated its privacy policy in 2024 to clarify its stance on data sharing with law enforcement. Pavel Durov, the CEO of Telegram, stated in September, “We’ve made it clear that the IP addresses and phone numbers of those who violate our rules can be disclosed to relevant authorities in response to valid legal requests.” This policy change has led to Telegram fulfilling 900 information requests from U.S. authorities in 2024, affecting a total of 2,253 individuals, as per the app’s in-built transparency report.
Data Breaches and Security Concerns
For those who might find the prospect of data sharing with law enforcement unsettling, it is worth noting that Telegram has faced its share of data breaches over the years. In 2020, approximately 42 million Iranian users had their data compromised, while in 2019, a vulnerability was exploited by Chinese agencies, leading to the exposure of protestor identities in Hong Kong. Such incidents raise legitimate concerns about the security of user data.
Unique Features and Public Channels
Despite these issues, Telegram offers features that set it apart from other messaging platforms like Signal. One significant distinction is its capability to function as a messaging board for large groups, akin to Discord. Users can create public channels that share a variety of content, from gaming news to sports updates. For instance, the @entertainment channel serves as a hub for trailers and promotional materials for upcoming movies and television shows. However, it is essential to note that these public channels are not end-to-end encrypted. While Telegram claims that all content is encrypted in transit and during storage, the accessibility of public channels means that posts are essentially public records.
Secret Chats and Message Deletion
Telegram does provide a feature for secret chats, which are end-to-end encrypted. However, these chats are limited to the device of origin, meaning they cannot be accessed on desktop or browser versions of the app. Telegram emphasizes that this design ensures safety as long as the user’s phone remains secure. Nevertheless, this restriction raises the risk of interception by unauthorized parties.
In terms of message management, Telegram allows for automatic message deletion, but the minimum interval is set at one day, contrasting with Signal’s more flexible options that can delete messages in mere minutes or seconds. Additionally, Telegram features a self-destruct option that can erase your account, messages, and contacts after a period of inactivity ranging from one to 24 months.
Transparency and Trust
Telegram’s client applications are open-source, similar to Signal, which can enhance transparency and allow users to inspect the code for vulnerabilities. However, Durov has clarified that the server-side code remains closed-source, stating, “You don’t even need the server-side code to check the integrity of Secret Chats — they are solid regardless of how the servers function.” The company’s privacy policy indicates that its cloud servers are encrypted, with encryption keys stored across multiple data centers in different jurisdictions, thereby limiting access to sensitive information.
While it is common for companies to maintain closed-source server code for various reasons, users must place their trust in Telegram to safeguard their data. A third-party audit could further strengthen this trust by verifying the operational integrity of the data centers, even if such audits only provide a momentary snapshot of security.
Subscription Model and Alternatives
Telegram operates on a freemium model, offering a paid tier at per month or annually for enhanced features, including unlimited cloud storage, animated emojis, and an ad-free experience in public channels. It is noteworthy that public channels with over 1,000 subscribers do contain advertisements.
With its selective encrypted messaging and expansive chat capabilities, Telegram serves as a viable alternative to services like Discord, which only provides end-to-end encryption for audio and video calls. However, users should remain vigilant about the data being collected outside of secret chats. Telegram is available for download at no cost from both the Apple App Store and Google Play Store.
