Messenger

Messenger is operated by Meta Platforms, Inc., headquartered in Menlo Park, California, and governed by US law. The product runs on Meta's shared infrastructure alongside Facebook and Instagram, with no option to keep data within the EU/EEA or store it locally. Meta's privacy documentation for Messenger describes no region-locked or local-storage alternative for personal accounts.

Meta began rolling out default end-to-end encryption for one-to-one personal messages and calls on Messenger in December 2023, using a system built on the Signal Protocol and Meta's "Labyrinth" protocol for encrypted message-history storage. Group chat encryption followed in a later phased rollout. Metadata—who messages whom, when, and how often—remains unencrypted and visible to Meta, as documented by EFF at launch. Since November 2025, Cloudflare's Key Transparency auditor has provided ongoing public verification of Messenger's encryption keys.

While message content is end-to-end encrypted, Meta's Messenger Privacy & Safety page confirms that non-personal messages, business-account chats, public channels, and conversations with Meta AI feed ad personalization. Meta's ad system draws on metadata such as who a user messages, when, and how often. EFF has documented that this metadata remains fully visible to Meta regardless of content encryption. This behavioral data feeds the advertising system that generates most of Meta's revenue.

Meta AI is built into Messenger. Meta states that private message content between users is not used to train its AI models unless a participant opts in. Conversations with the Meta AI assistant are a separate data stream. Since December 16, 2025, Meta uses people's interactions with Meta AI across Facebook, Instagram, WhatsApp, and Messenger to personalize ads. There is no opt-out for most users. A formal opt-out exists only in the EU, UK, Switzerland, Brazil, Japan, and South Korea, where local data-protection laws require one. Users elsewhere, including the US, cannot exclude their Meta AI prompts from ad targeting.

Messenger is closed-source, proprietary software owned by Meta Platforms. No application source code is published under any OSI-approved license. The encryption layer draws on cryptographic primitives from the open-source Signal Protocol, but that does not extend to the client or server application itself.

No independent security audit or certification specific to the Messenger app was found. Since November 2025, Cloudflare has run a Key Transparency auditor that continuously verifies Messenger's encryption keys through a live public dashboard, but this is an ongoing verification log, not a completed audit with published findings. Meta also runs a public bug bounty program covering Messenger, with rewards up to $300,000 for critical mobile remote-code-execution reports. A bug bounty is a vulnerability-disclosure incentive, not an independent audit.

Messenger is a closed corporate product with no public governance model, contribution process, or code of conduct. Product and roadmap decisions are made internally by Meta with no external accountability structure.

Messenger is free to download and use, with no purchase, subscription, or in-app payment required for its core messaging features. This is not monetization-free: the product is funded by Meta's advertising business, which draws on behavioral and metadata signals collected through Messenger and Meta's other apps.

There is no paid consumer tier of Messenger; the entire product is free. Rather than a limited preview gating users toward a paid plan, the free-and-only tier is itself the monetization mechanism: full functionality is offered in exchange for data that feeds Meta's advertising system, not money.

Messenger has no consumer pricing to obscure: there is no subscription, in-app purchase, storage tier, or auto-renewal that could be manipulated through dark patterns. In the narrow sense of pricing transparency, the product is straightforward: users pay for the product in data, which is scored separately under Section 1.

Messenger's consumer product carries no price at all: no paid tier, storage upgrade, or subscription varies by region because none exists. This question is excluded from the Pricing Model total, reducing that section's maximum from 17 to 14 points, per the N/A rule for products with no price whatsoever.

Meta's "Download Your Information" tool lets users export their Messenger conversations, including message content and media, in either JSON, an open, machine-readable format, or HTML. The export covers full account history rather than a single conversation at a time, and requests are self-service through account settings, satisfying a genuine open-format export of the data Messenger holds about a user.

Meta offers no official self-hosted version of Messenger; the product runs exclusively on Meta's own servers. Unofficial third-party desktop wrappers exist for accessing the web client, but they are unauthorized clients built around the same Meta-hosted backend and are not self-hosted.

Messenger requires an active internet connection to send or receive messages and calls. Previously loaded conversations remain viewable offline from the local cache, but no core communication functions work without connectivity.

Messenger runs on iOS and Android, plus web access through facebook.com/messages after Meta discontinued the standalone messenger.com website and the Windows/macOS desktop apps between late 2025 and April 2026. Web access now requires a Facebook account. There is no official Linux client and no F-Droid listing; every supported platform is a closed, proprietary ecosystem.

Meta publishes a dedicated Messenger accessibility help page and related documentation covering screen-reader compatibility, VoiceOver support on iOS, keyboard shortcuts, and automatic captions for voice messages and live audio rooms. There is no published WCAG conformance statement or formal accessibility audit specific to Messenger.

Messenger is a core product of Meta Platforms, Inc. (NASDAQ: META), one of the world's largest advertising companies. There is no independent board, separate ownership, or spun-off structure for Messenger; Meta controls its roadmap, monetization, and data practices directly.

Messenger has never been an independently owned product. It grew out of Facebook Chat (2008) and launched as a standalone app in August 2011, built in part on messaging technology from Meta's 2011 acquisition of the small startup Beluga. It has remained wholly owned and operated by Facebook/Meta throughout, with no acquisition, spinoff, or change of control in the last three years, including through Meta's 2026 decision to fold the standalone Messenger website into Facebook.com, which consolidated Meta's own products rather than changing ownership.

Meta publishes Community Standards and a Responsible Business Practices framework, but its practices repeatedly contradict them. Child-safety groups and multiple US state attorneys general objected when Meta defaulted Facebook and Messenger to end-to-end encryption in December 2023, arguing it would hamper detection of child exploitation material. Meta Platforms Ireland Limited was separately fined a record €1.2 billion by Irish regulators in May 2023 for unlawful EU-to-US data transfers, the largest GDPR penalty ever issued. Ethical Consumer rates Meta's overall ethical conduct as poor, citing an addictive-design finding affecting minors, tax-avoidance practices, and labor concerns around content-moderation contractors.

Meta publishes an annual Sustainability Report and has matched 100% of its electricity consumption with renewable energy since 2020, maintaining net-zero operational emissions and contracting over 30 GW of clean-energy projects globally by early 2026. This infrastructure directly powers Messenger alongside Meta's other products. Scope 3 supply chain emissions are rising due to the expansion of AI infrastructure, but public reporting and commitments remain current.

Messenger has been continuously developed since its 2011 standalone launch, with roots in Facebook Chat dating back to 2008, making it more than 14 years old and with ongoing active investment, including major features shipped as recently as 2025 and 2026, such as default encryption, Key Transparency, and Meta AI integration.

Meta ships frequent Messenger updates on iOS and Android and maintains an active engineering blog documenting ongoing work, including Key Transparency in November 2025 and encrypted backup improvements in May 2026. Messenger remains one of the most widely used messaging apps globally; EFF cited usage by over a billion people at the time of the 2023 encryption rollout. As it is closed-source software, there is no open contributor community, but the release cadence and public engineering communication remain consistently active.