nullpay.
Back to toolkit
MessagingIntermediate15 minall

Messaging Metadata

Risk

The risk

Why this matters

Even E2EE messengers leak metadata: who you talk to, when, how often, group memberships. WhatsApp encrypts content but Meta harvests everything else. As former NSA and CIA director Michael Hayden stated: 'We kill people based on metadata' — referring to drone targeting decisions informed by communications metadata. The content is secondary.

Recommended tools

What to use

Signal
SignalOSSFree

Sealed sender hides who messages whom from Signal itself.

SimpleX Chat
SimpleX ChatOSSFree

No identifiers at all. Connections are pairwise — no central graph.

Briar
BriarOSSFree

Peer-to-peer with no server. Zero metadata on any central system.

Setup guide

How to set it up

  1. 1

    Understand: E2EE protects content, but who-talks-to-whom is often more revealing

  2. 2

    Signal's sealed sender feature hides sender identity from Signal's servers

  3. 3

    For high-risk communication: use SimpleX Chat (no user IDs, no central metadata)

  4. 4

    Audit your WhatsApp groups — each group is a social graph Meta can analyze

  5. 5

    Consider timing: regular messaging patterns reveal your schedule and relationships