01 — The Problem
Every messenger charges the same entry fee.
It is your identity, and you pay it before your first message. Once paid, it cannot be taken back — and the whole industry is built on the assumption that you will keep paying it.
The entry fee
Open almost any messenger and the first screen asks for a phone number. That number is not a convenience. It is a permanent, government-linked, cross-service identifier that follows you into every database the service touches and every database those databases are ever merged with. You gave it to talk to your sister. It now sits in a table that says who you are, who you know, and when you were awake.
The defence is always the same: the messages themselves are encrypted. That is true and it matters and it is not the argument. The content is the smallest part of what a conversation reveals. Who you spoke to, how often, for how long, at what hour, and from where — that is the shape of a life, and encryption of the payload does nothing to hide it.
The identifier
A phone number is an identity document you hand to a private company so that it can route text. It links your conversations to your bank, your government ID, your address history and every other service that used the same number as a key.
The graph
Who talks to whom, and when. It survives encryption, it is the most commercially valuable thing a messenger holds, and it is the part nobody promises to delete — because for most of them it is the product.
The payment
The cruel one. On every other paid privacy app, the moment you pay you re-attach the identity the app spent so much effort avoiding — a card, a store account, a receipt with your name on it, linked to the account that redeemed it.
Why the industry cannot stop
It is tempting to read this as carelessness. It is not. For most of the field the identity machine is the business, and you cannot remove the engine from a car and call it a refinement.
Meta does not read WhatsApp messages. It does not need to. It monetises the graph and the business rail around it, and in June 2025 it began placing advertising inside the app itself. A company in that position cannot offer an identity-free product, because identity is the asset. As one of our own internal notes puts it: for them this is not a feature, it is an amputation.
The exceptions prove how hard the position is to hold. Signal genuinely does not monetise you — and runs at a reported fifty million dollars a year, covered by a founder's loan and donations, which its own leadership has publicly described as a sustainability question. Session, the most radical of the alternatives, came within days of shutting down in July 2026. Threema has been profitable for a decade on a one-time purchase, and has roughly five to ten million users after all that time, because there is no free tier and virality dies at a paywall.
We will not tell you that "all other messengers sell your data". It is not true. Signal does not. Threema does not. SimpleX does not. The accurate statement is narrower and stronger: most messaging apps run on your data, and the ones that refuse have not yet found a way to pay for themselves. That gap — refusing the data and being solvent — is the entire opportunity, and it is what we are trying to close.
What it costs the people paying it
For most people, most of the time, the entry fee costs nothing they notice. That is exactly why it keeps being charged. The bill arrives for a minority, and it arrives all at once: a journalist whose source is identified from call records rather than content; a doctor whose patient list is inferable from a contact graph; a woman whose ex-partner finds her because a phone number is also a search key; someone in a place where the wrong conversation is a crime.
There is a second, quieter cost that everyone pays. A service that holds identity can be compelled to produce it, and can be breached into producing it. Every year of operation is another year of accumulated liability sitting on someone else's server, waiting.
And a regulatory squeeze that is getting tighter
India — our home market and our beachhead — has a traceability mandate that WhatsApp is currently fighting in court. The United Kingdom's Investigatory Powers Act and Online Safety Act create precisely the encryption-compulsion powers that a company holding identity can be ordered to exercise. The direction of travel is one way.
This is usually read as a threat to private messaging. We read it as the clock on the opportunity. A company that holds identity will eventually be made to hand it over. A company that never held it has nothing to hand over, and says so in advance, in public, in its own source code.
India is our home market and the hardest traceability regime in the world, which is precisely why building here is an advantage rather than a handicap: a product designed to satisfy this regulator satisfies every other one. We hold no personal data, so the duties that attach to us are duties we can meet cheaply and completely — and the compliance function that grows without limit at a company built on identity simply does not exist here.