Messenger is the most invasive app, research says

May 8, 2026

Recent research from security firm Surfshark has unveiled that Meta’s Messenger app stands out as the “most data-hungry messaging app” in the market. The study highlights that Messenger is collecting an impressive 32 out of 35 possible data types, which can be leveraged for behavioral analysis and targeted advertising. This revelation comes at a time when privacy concerns are escalating, particularly following Meta’s decision to disable end-to-end encryption for Instagram direct messages on May 8, 2026. This change raises significant implications for the millions who rely on Instagram for daily communication.

With the removal of end-to-end encryption, the privacy of users’ messages is compromised, allowing Meta potential access to the content shared between friends and family. Cybersecurity experts, including Nikodemas Zaliauskas from Surfshark, have expressed their concerns regarding this shift. Zaliauskas emphasizes the importance of recognizing that users are not merely sharing information with friends; they are also providing valuable data to the company that operates the app. He notes, “Popular platforms often collect a wide range of user data for various purposes, including advertising, product personalization, user behavior analysis, and even tracking.” This extensive data collection, particularly when combined with Artificial Intelligence (AI), effectively diminishes user privacy.

Understanding Encryption

To grasp the implications of this change, it is essential to understand how encryption functions in messaging apps like Messenger and Instagram. Encryption can be likened to sending a letter in a locked box, where only the sender and recipient possess the key. Each device in an encrypted chat has a unique key that scrambles messages, photos, and video calls during transmission. Only the corresponding key on the receiving device can unscramble this information.

Once Instagram disables this encryption, the secure communication channel transforms into an open postcard, accessible to anyone at Meta. For users wishing to preserve their encrypted chats, Instagram has provided instructions for downloading messages and media prior to the May 8, 2026 deadline.

In contrast, other Meta-owned platforms like WhatsApp continue to offer end-to-end encryption by default, utilizing the open-source Signal encryption protocol to secure messages before they leave users’ devices. WhatsApp maintains that it cannot access users’ messages or calls, a point Zaliauskas underscores when he states, “This lack of protection raises serious questions about the company’s commitment to protecting user data and ensuring digital privacy.”

The Rise of AI in Messaging

Surfshark’s findings also indicate that a staggering 90% of messaging apps now incorporate AI features, such as conversation summaries and real-time translation. This integration means that users are not only sharing information with their contacts but also potentially with the companies behind these applications.

For those seeking a more private messaging alternative, Surfshark ranks Signal as the top choice. Signal combines end-to-end encryption with quantum-secure cryptography and collects minimal user data. Apple’s iMessage offers similar protections but has been found to gather 10 types of data, highlighting the varying levels of privacy across platforms. Additionally, users can enhance their online security and privacy through the use of a Virtual Private Network (VPN).

What is a VPN?

A VPN, or Virtual Private Network, is an application designed to encrypt and anonymize online activities, thereby enhancing user privacy, concealing location, and preventing advertisers, trackers, and even governments from monitoring online behavior. VPNs have become essential tools for businesses aiming to protect proprietary data, as well as for whistleblowers and journalists safeguarding sensitive information. Today, VPNs are increasingly recognized as vital for anyone utilizing smartphones, laptops, desktop PCs, streaming devices, or tablets.

What Can a VPN Do?

Utilizing a VPN extends beyond merely bolstering online privacy. These versatile applications offer a range of features, including:

  • Protection of online data
  • Safety on public Wi-Fi networks
  • Access to blocked websites in various regions
  • Blocking trackers from advertisers
  • Blocking trackers from governments
  • Comparing prices for flights and hotels in different countries
  • Accessing apps restricted in certain locations
  • Avoiding censorship in current locations
  • Streaming sports from anywhere globally
  • Bypassing speed restrictions from broadband providers
  • Optimizing online multiplayer gaming experiences
AppWizard
Messenger is the most invasive app, research says