WhatsApp offers meaningful privacy controls, limited message retention, and clear in-app deletion/access tools, but balances that with extensive metadata collection, Meta sharing, business-facing data use, arbitration/class-action waivers for some users, and strong liability limitations.
WhatsApp’s legal terms emphasize messaging privacy in some respects, especially by not ordinarily retaining delivered messages and offering in-app account data access and deletion tools. But it also collects substantial metadata, shares information across Meta companies and providers, allows broad business-message processing, imposes strong liability limits, and for U.S./Canada users requires individual arbitration unless timely opted out.
Points of interest
For U.S. and Canada users, most disputes must be resolved through individual arbitration unless you mail an opt-out within 30 days. This sharply limits going to court or joining class actions.
"you waive any right to have those disputes decided by a judge or jury, and that you waive your right to participate in class actions"
Even if message content is not ordinarily stored, WhatsApp collects broad activity, device, connection, IP, cookies, and estimated location data. This can reveal patterns about who you interact with, when, and how often.
"We collect information about your activity... Device and connection-specific information... IP address... identifiers"
WhatsApp shares data with Meta companies not just for security and infrastructure, but also to improve products and ad experiences across Meta services. That expands use of your data beyond core messaging.
"to improve your ads and products experience across the Meta Company Products"
Messages sent to businesses may be accessible to the business and its service providers, which can include Meta. Those conversations may be stored, read, or otherwise processed under the business's own privacy practices.
"a business may give such third-party service provider access to its communications to send, store, read, manage, or otherwise process them"
WhatsApp says it does not normally keep your messages once delivered. Undelivered messages are kept encrypted for up to 30 days, which is comparatively privacy-protective for message content.
"We do not retain your messages in the ordinary course... Once your messages are delivered, they are deleted from our servers."
If WhatsApp harms you, its total liability is generally capped at $100 or what you paid in the last 12 months. For a free service, that usually means very little practical compensation.
"will not exceed the greater of one hundred dollars ($100) or the amount you have paid us in the past twelve months"
WhatsApp says it may modify, suspend, or terminate access at any time, including for risk, harm, or long inactivity. That gives the company broad discretion to remove features or disable accounts.
"We may modify, suspend, or terminate your access to or use of our Services anytime for any reason"
You can request account information and port your data through an in-app feature. This gives users a practical way to inspect and move some of their information.
"You can access or port your information using our in-app Request Account Info feature"
WhatsApp provides an in-app account deletion tool and explains that deletion removes account info, profile photo, group memberships, and message history from WhatsApp. It also warns that others may still keep copies.
"You can delete your WhatsApp account at any time... using our in-app delete my account feature."
WhatsApp can update its terms and treats continued use as acceptance after notice of material changes. If you disagree, your main remedy is to stop using the service and delete your account.
"We may amend or update these Terms... Your continued use of our Services confirms your acceptance"
Outside specific limits for undelivered messages, WhatsApp keeps information as long as needed for service, legal, security, or enforcement reasons on a case-by-case basis. That leaves retention periods open-ended for many data types.
"We store information for as long as necessary... The storage periods are determined on a case-by-case basis"
WhatsApp is not a substitute for phone emergency services and will not connect you to police, fire, or hospitals. Users should not rely on the app in emergencies.
"Our Services do not provide access to emergency services or emergency services providers"
Other Messaging services on AIgree
Compare WhatsApp with…
The 7 clauses that actually matter, the red flags to watch for, in 5 minutes.
Report a problem with this summary
Spot something wrong, missing, or misleading? Tell us — we review every report.
Spot something wrong, missing, or misleading? Tell us — we review every report.
Thanks — your report was submitted and will be reviewed.
Documents
Terms of Service
source ↗- •You must be at least 13, register with accurate information, keep your phone number updated, and secure your device and account.
- •You must use WhatsApp lawfully and may not abuse the service, send unauthorized bulk messages, scrape data, reverse engineer, or harm users or systems.
- •WhatsApp may collect and share information under its Privacy Policy, including with Meta companies and providers, and may store data globally outside your country.
- •You keep ownership of content you submit, but grant WhatsApp a worldwide, royalty-free license to use it to operate and provide the service.
- •WhatsApp can modify, suspend, or terminate your access at any time, including for violations, harm, legal risk, or long-term inactivity.
- •WhatsApp is not emergency calling service and does not connect to police, fire, hospitals, or public safety answering points.
- •The service is provided "as is" without warranties, and WhatsApp's total liability is generally capped at the greater of $100 or amounts paid in 12 months.
- •If your use, content, or violations cause third-party claims against WhatsApp, you may have to cover related losses and legal costs where law allows.
- •For U.S. and Canada users, most disputes go to binding individual arbitration unless you opt out within 30 days; class actions are waived.
- •Outside U.S. and Canada arbitration rules, disputes generally must be filed in California, governed by California law, and usually within one year.
Privacy Policy
source ↗- •WhatsApp requires your phone number and basic profile information to create an account, and optional features may require extra data like contacts or precise location.
- •Your messages are generally stored on your device, not WhatsApp’s servers, though undelivered messages may stay encrypted on servers for up to 30 days.
- •WhatsApp collects usage, device, connection, IP, cookie, and approximate location data, and it may receive information from other users, businesses, third parties, and app stores.
- •If you interact with businesses on WhatsApp, the business and its providers may read, store, or process those messages under the business’s own privacy practices.
- •WhatsApp shares information with Meta companies, service providers, integrated third parties, and people you message to operate services, improve products, support marketing, and maintain safety.
- •Some account details, such as your phone number, profile name, photo, about information, last seen, and read receipts, may be visible to other users depending on settings.
- •You can manage privacy settings, block users, change your number or profile details, request account information, and delete your account in the app.
- •Deleting your account removes account data, profile photo, group membership, and message history from WhatsApp, but others may still keep copies of your messages.
- •WhatsApp may keep data as long as needed for service, legal, security, or enforcement purposes, and it may disclose data for legal requests or safety reasons.
- •Your information may be transferred and processed globally, including in the United States, and WhatsApp says it will notify users of material privacy policy updates.
