Features
How messaging platforms lock you in, and how to move
Messaging platforms are chosen by the group, not by you. What the identifier decides, why sealed content is not private, and how to move a conversation.
Messaging is the only category in this catalog where the people you talk to choose the product for you. You can dislike a service, read every criticism, and still be on it because your family is.
That fact explains most of what is strange about messaging platforms. So the questions worth asking here differ from those that matter for the broadcast services covered under major social networks.
What to take away
- A messaging service is chosen by a group, so switching is a coordination problem before it is a preference.
- The identifier you are reachable at, usually a phone number or an account name, decides how portable you are.
- Sealed message content is not the same as a private conversation, because who spoke to whom and when is a separate record with its own protections.
The lock-in here is social, not technical
Broadcast services hold you with an audience you built. Messaging services hold you with the people who already have you in a thread. Nothing is stopping you installing something else. What stops you is that a conversation needs two ends, and a group of eleven needs eleven.
Messaging markets settle into regional habits that look irrational from outside.
A country converges on one service, then every new arrival converges on it too, because being the only person on something else means being alone. That is not a judgment about quality, just arithmetic about who else is already there.
The practical consequence is that individual switching almost never works, and group switching sometimes does. If you want to move, move a whole conversation at once and give it a reason to stay, or accept running two services in parallel for a long time.
The services this usually means
A conversation about lock-in gets concrete fast, because a handful of services carry almost all of it.
- Signalreaches you at a phone number, encrypts one-to-one and group messages end to end by default, and keeps its backup as a local file you control rather than a copy in a cloud drive.
- WhatsAppalso ties the account to a phone number and encrypts chats end to end, but its default backup to iCloud or Google Drive is not end-to-end encrypted unless you set a backup password.
- iMessagereaches you at a phone number or an Apple ID, encrypts end to end, and leaves it to an iCloud setting whether a copy of the messages sits in Apple's cloud.
- Telegramasks for a phone number as well, but its ordinary cloud chats and groups are not end-to-end encrypted; only the one-to-one secret chats are. Its default is the opposite of WhatsApp's.
- Messenger, which hangs off a Facebook account, and Discord, which now reaches you at a username, do not encrypt by default. Messenger hides it behind a secret-conversation toggle; Discord offers none at all.
- SMS, and the RCS that is replacing it on some carriers, travels over the carrier network, where the operator can read it. Encrypted RCS works only between particular apps.
Number portability is the reason a phone-number account can move at all: in the United States, the Federal Communications Commission requires carriers to let you keep your number when you change providers. What that does not move is your history, your groups or the contacts who know you by that number.
The identifier is the real account
Ask what you are reachable at, and what happens to that when things change.
A service keyed to a phone number ties your reachability to a telecom account you may lose or change when you move country.
It cannot easily separate from your legal identity. Anyone who has your number has a route to you, wanted or not. When the number is recycled to a new subscriber, the identity attached to it becomes a problem for someone.
A service keyed to a username or an internal account lets you hand out a contact point that is not your phone number, and lets you change it. It usually asks for something else at signup instead, and what it asks for is worth reading before you decide the trade is good.
Neither is simply better. The question is which failure you would rather have: losing an account when a phone number lapses, or maintaining a separate credential you can also lose.
Encryption tells you less than people think
End-to-end encryption means the service cannot read the content of a message in transit. That is a real and valuable property. It is also narrower than the word "private" suggests, and the gap catches people out.
What sealed content does not cover:
What encryption does not cover
- Backupscloud copy may be less protected
- The other endrecipient can screenshot or forward
- Group membershipwhoever adds decides access
- The record of contactwho, when, how often
- Defaultssealed only if the thread is in that mode
So the useful question is not whether a service offers encryption. It is what the default is, what the backup does, and what is recorded about the conversation even when the words are sealed.
Three services show what that means in practice. Signal keeps as little as it can, and its sealed-sender design hides who is messaging whom even from the service itself, so the operator's answer to a data request is close to nothing. Telegram keeps ordinary cloud chats on its servers until someone deletes them. WhatsApp, like the rest of Meta, keeps records of who contacted whom and when under its privacy policy, and the default cloud backup sits outside the sealed envelope.
What a catalog entry records for a messaging service
What a catalog entry records
| Field | What it records |
|---|---|
| Identifier | What you are reachable at, and whether you can change it |
| Default protection | What applies to an ordinary one-to-one thread without changing any setting |
| Backup behavior | Where a copy goes, and under what protection |
| Group model | Who can add members, and whether membership is visible to all of them |
| Retention | What stays on the service after you delete it from your device |
| Export | Whether a conversation can be taken out in a readable form, and by whom |
| Other software | Whether anything besides the official client can connect |
| Where the claim came from | The page checked, and the date it was checked |
As everywhere on this site, the last row is the one that keeps the rest honest. Every field above is set by a policy the operator can change, so an entry with no source and no date is a rumour in a nice table.
What a catalog entry records
- Identifierwhat you are reachable at
- Default protectionwhat applies without changing settings
- Backup behaviorwhere a copy goes
- Group modelwho can add members
- Retentionwhat stays after you delete
- Exportwhether a conversation can be taken out
- Where the claim came frompage and date
Groups behave differently at every size
A thread of two is a conversation. A group of ten is a small room with norms. A group of several hundred is a broadcast channel wearing a group's clothing, and it will develop moderation problems that no two-person design anticipated.
Services handle this by adding controls as groups grow: admins, restricted posting, invitation links, member limits. These controls arrive at different sizes on different services, and the size where a group tips from conversation to publication is the most useful thing to know about a service's group model.
Telegram's channels and WhatsApp's Channels are the clearest version of that line: one-way feeds with followers, where nobody expects a reply and a comment section is an afterthought. Discord's announcement channels do the same job inside a server.
Below that line, people speak as though nobody is listening. Above it, they are broadcasting and have not noticed.
If you run a large group, assume everything in it is forwardable, because it is. Sealed content does not survive a member who chooses to pass it on.
Before you move a conversation
- Agree the move with everyone, and pick a date. A half-migrated group is worse than either service.
- Check what happens to the old history. Most of it will not come with you, and deciding that in advance is better than discovering it.
- Export what you can before you go. WhatsApp's Export chat, Telegram Desktop's JSON export, Meta's Download Your Information and Google Takeout cover most of the ground; on Signal the archive is the local backup file.
- Look at whether the new service needs a phone number, and whether everyone is willing to hand one over to the same room.
- Decide the destination before you announce the move. Signal and Telegram are the usual landing places for a group leaving WhatsApp, and Matrix, reached through the Element client, is where a group goes when it does not want to belong to a single operator again.
- Test the export on the new service in the first week, while nothing important is in there yet.
- Keep one person on the old service for a while. There is always someone who did not get the message about the message service.
Common questions
Is a service with sealed content always the safer choice?
Safer against one specific threat, which is somebody reading messages in transit. It does nothing about a lost phone, a backup with weaker protection, or a member of the group who forwards things. Match the property to the risk you actually have.
Why do different countries settle on different messaging services?
Because the deciding factor is who is already reachable, and that is local. Once a group of people converge somewhere, everyone who wants to talk to them follows, and the choice becomes self-sustaining regardless of what any comparison would recommend.
Can I use two messaging services at once?
Yes, and most people who move ever do it that way. The cost is attention rather than money: two places to check, two sets of notifications, and a period where you miss things. Plan for it to last months rather than days.
Does it matter whether other software can connect?
It matters more the longer you stay. A service that only its own client can reach is one where every future decision about your archive, your notifications and your reachability is made by one party. A service others can connect to leaves you somewhere to go. In practice that field means Matrix and its Element client, bridges such as Beeper and Matterbridge, and the desktop clients that wrap more than one network in a single window, and it is also why a service's terms about third-party clients matter to people who never install one.
In this guide
- How to check messaging platforms facts in three setsMessaging platforms facts in three sets: what two accounts can test, what only a policy or transparency report shows, and what nobody outside can settle.
- Messaging platforms timeline: four models, no datesMessaging platforms timeline told through four addressing models: open address, service account, phone number, and application account. No dates, just sequence.
