Same court order, sent to two apps.
The answers couldn't be more different.
One comes back as a thick file, and the other as two dates.
What can most apps be made to hand over?
Quite a lot more than the messages themselves.
Who you talked to.
When, and how often.
Your contacts.
The groups you are in.
Even your location patterns.
All of that has a name: metadata, which is the record around a message rather than the message itself.
Think of a posted letter.
Metadata is everything printed on the envelope, and it is kept whether or not anyone opens it.
Why does metadata matter if my messages are encrypted?
Because the pattern is often as revealing as the words.
Nobody needs to read a conversation to learn that you called a lawyer at 11pm and a hospital at midnight.
Who, when, how often and from where, repeated over months, draws a very clear picture of a life.
Encryption protects the contents of the envelope.
Metadata describes the shape of it, and how many you sent, and to whom.
What can Signal actually give?
The date you joined and the date you last connected.
That's the whole file.
Not your contacts, not your groups, not who you message or how often.
The difference isn't luck.
It's that Signal never collects the rest in the first place.
Less stored means less to surrender.
No amount of pressure gets a company to produce a record it never wrote down.
Isn't this only a problem if I have something to hide?
That question assumes the only risk is an order aimed at you.
The bigger everyday risk is the pile itself.
A database that exists can be breached, sold along with a company, or handed over by a business under pressure.
You aren't choosing between innocence and guilt here.
You're choosing whether a permanent record of everyone you speak to should exist at all.
Nobody has anything to hide until the day they do, and by then the record is already written.
Things to Remember
- Metadata is who, when and how often, not the words themselves.
- Encrypted messages still leave a metadata trail on most apps.
- Signal holds only your join date and last connection date.
- Any database that exists can eventually be leaked or demanded.
- Choose apps that collect less, not apps that promise more.