Telegram’s Privacy Landscape: A Closer Look
Telegram, a cloud-based messaging platform, presents a unique blend of features that may attract users despite its less robust privacy measures compared to competitors like Signal. While it offers a variety of functionalities, it is essential to understand the implications of its data handling practices.
At its core, Telegram stores the data necessary for its operations, including metadata such as IP addresses. In a notable shift, the company updated its privacy policy in 2024, stating that it would comply with law enforcement requests for user data when presented with valid legal documentation. Pavel Durov, Telegram’s CEO, emphasized this change, noting that the platform would disclose the IP addresses and phone numbers of users who violate its rules to relevant authorities.
In the wake of this policy adjustment, Telegram reported fulfilling 900 requests from U.S. authorities in 2024, affecting a total of 2,253 individuals, as detailed in its in-app transparency report. This raises important questions about user privacy and the potential risks associated with using the platform.
Moreover, Telegram has faced its share of data breaches over the years. A significant incident in 2020 resulted in the exposure of data from approximately 42 million Iranian users, while a 2019 vulnerability allowed Chinese agencies to identify protestors in Hong Kong. Such events underscore the importance of vigilance when considering the use of the app.
Despite these concerns, Telegram offers features that differentiate it from other messaging applications. Unlike Signal, which focuses on privacy, Telegram can function as a messaging board for larger groups, akin to Discord. It provides public channels where users can access a variety of content, including news, sports updates, and entertainment trailers. However, it is crucial to note that these public channels lack end-to-end encryption, meaning that posts are accessible to all Telegram users without the need for an encryption key.
For those seeking more secure communication, Telegram does offer secret chats that utilize end-to-end encryption. However, these chats are limited to the device of origin, typically a user’s phone. This restriction means that secret chats cannot be accessed on desktop or browser versions of Telegram, potentially exposing them to interception by unintended recipients.
Telegram also features automatic message deletion, but the minimum interval for this option is one day, contrasting with Signal’s more flexible settings that allow for deletion within minutes or seconds. Additionally, Telegram includes a self-destruct feature that can erase accounts, messages, and contacts after a specified period of inactivity, ranging from one to 24 months.
While Telegram’s client applications are open-source, providing a level of transparency for users to inspect the code for vulnerabilities, the server-side code remains closed-source. Durov has defended this approach, asserting that the integrity of secret chats is maintained regardless of server operations. Telegram’s privacy policy assures users that its cloud servers are encrypted, with encryption keys stored across multiple data centers in different jurisdictions, thereby limiting access to sensitive information.
It is not uncommon for companies to maintain closed-source server code to safeguard intellectual property and security. However, this practice necessitates a degree of trust in the company to protect user data. A third-party audit could enhance this trust by verifying that data centers function as intended, although such audits provide only a snapshot of security at a given time.
While Telegram’s end-to-end encryption offers some reassurance, it is important to recognize that metadata may still be collected, raising further privacy concerns. Telegram operates on a freemium model, allowing users to access basic features at no cost, with a paid tier available for per month or annually, which unlocks additional functionalities such as unlimited cloud storage and an ad-free experience in public channels.
In summary, Telegram’s selective encryption and capacity for larger group chats make it a viable alternative to services like Discord, which only provides end-to-end encryption for audio and video calls. However, users should remain cautious, as data collection persists outside of secret chats. Telegram is readily available for download on both the Apple App Store and Google Play Store at no charge.
