Terms Unconditional

Consumer Apps · Social/Messaging · Regulatory action + Private litigation

Meta (Facebook / Instagram / WhatsApp)

Headline

Meta has told hundreds of millions of WhatsApp users their messages are 'end-to-end encrypted' — meaning not even Meta can read them.

Meta has told hundreds of millions of WhatsApp users their messages are 'end-to-end encrypted' — meaning not even Meta can read them. A March 2026 lawsuit alleges Meta and its contractor Accenture actually INTERCEPTED, READ, AND STORED those supposedly private messages anyway. If proven, this isn't a fine-print surprise — it's a direct contradiction of the single most-marketed privacy promise Meta makes to over 2 billion people. And this sits alongside a $375 MILLION jury penalty for misleading parents about child safety, a $5 BILLION FTC fine, and a $725 MILLION settlement over Cambridge Analytica — Meta's cumulative privacy-related payouts likely exceed $6 billion, the largest of any company in this entire tracker.

  • SeveritySeverity 5 of 5. Meta has told hundreds of millions of WhatsApp users their messages are 'end-to-end encrypted' — meaning not even Meta can read them.
  • Evidence tierUnassigned
  • Claims confirmed1 of 11 claims confirmed against a primary source
  • Last verified2026-08-04

Primary source. www.ftc.gov/news-events/news/press-releases/2019/07/ftc-imposes-5-billion-penalty-sweeping-new-privacy-restrictions-facebook — Verified - primary source confirmed.

Last verified 96 days agoverified 96 days ago0180 days
Freshness. Last verified 96 days ago (2026-08-04); stale after 180 days.

Terms

Arbitration

Meta's own Instagram Terms contain a standard binding arbitration + class action waiver clause (not independently confirmed word-for-word this pass). Reports of a December 2025 ruling that Meta waived its right to compel arbitration in separate antitrust litigation, and of a judge's comments about Meta's arbitration stance in the youth-addiction MDL, could not be verified and should not be cited without a source.

Data sharing

MASSIVE, ONGOING LITIGATION LANDSCAPE (as of mid-2026): Meta is defending thousands of consolidated federal lawsuits, separate suits by 42 attorneys general (41 states + DC: 33 originally in a joint federal suit filed Oct. 2023 (Meta's Q2 2026 10-Q refers to 29 state attorneys general now suing in the multidistrict litigation) and 9 in their own state courts), and 800+ cases in a California state consolidation (JCCP 5255) over allegedly addictive design (infinite scroll, autoplay, notification manipulation) causing depression, anxiety, eating disorders, and self-harm in minors. A New Mexico jury ordered Meta to pay $375 MILLION in civil penalties (March 2026) for misleading consumers about child safety; a Los Angeles jury separately found Meta and Google/YouTube negligent and awarded $6 million to one plaintiff. A March 2026 case (Shirazi et al. v. Meta) alleges Meta and Accenture intercepted/read/stored 'private' WhatsApp messages despite marketing the platform as end-to-end encrypted — a direct contradiction of Meta's core privacy claim if proven. Meta also operates under a 2022 DOJ consent agreement after violating the Fair Housing Act by letting housing ads be targeted/excluded by race, sex, and religion. ADDITIONAL CONFIRMED HISTORY: separate from the litigation above, Meta previously paid a $5.0 BILLION FTC penalty (2020 consent order) over the Cambridge Analytica data-misuse scandal, plus a separate $725 MILLION private class-action settlement for the same underlying conduct — meaning Meta's cumulative confirmed privacy-related payouts across just these few incidents exceed $6 billion, likely making it the single largest cumulative privacy-penalty payer of any company in this entire audit, ahead of even Google/Alphabet's individual settlements.

Fees and billing

Not itemized this pass.

Contacts

Privacy contact. No published privacy email; Meta routes all requests through in-product privacy forms

Legal notice. PUBLIC COMPANY (META). Service route: c/o General Counsel / Corporate Secretary, Menlo Park, California — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.

Mailing address. Meta Platforms, Inc., ATTN: Privacy Operations, 1 Meta Way, Menlo Park, CA 94025, USA (corporate/SEC address: 1601 Willow Road, Menlo Park, CA 94025)

Written channel present
Paper trail: written. Written channel present.

Evidence

ClaimKindSupportSources
1. Meta has told hundreds of millions of WhatsApp users their messages are 'end-to-end encrypted.'factunknownnone recorded
2. Meaning not even Meta can read them.characterizationn/anone recorded
3. A March 2026 lawsuit alleges Meta and Accenture intercepted, read and stored WhatsApp messages.factunsupported1 (0 confirmed)
4. Accenture is Meta's contractor.factunsupportednone recorded
5. If proven, it is a direct contradiction of the single most-marketed privacy promise Meta makes.characterizationn/anone recorded
6. Meta makes this promise to over 2 billion people.factunsupported1 (0 confirmed)
7. A jury imposed a $375 million penalty on Meta for misleading parents about child safety.factunsupported1 (0 confirmed)
8. Meta received a $5 billion FTC fine.factsupportednone recorded
9. Meta paid a $725 million settlement over Cambridge Analytica.factunsupported1 (1 confirmed)
10. Meta's cumulative privacy-related payouts likely exceed $6 billion.factunsupported1 (0 confirmed)
11. Meta's payouts are the largest of any company in this tracker.factunknownnone recorded

1 of 11 claims have a confirmed source of their own.

Sources

SourceClaimTierStatusQuote
court · 2026-03-25
www.courtlistener.com/recap/gov.uscourts.cand.466549/gov.uscourts.cand.466549.1.0.pdf
Claim 3Unassignedcorrected“WhatsApp and its parent company Meta secretly intercept, read, store, access, and/or view the supposedly private messages”
Quote basis: not recorded.
noneClaim 6Unassignednot foundNo quote recorded.
Quote basis: not recorded.
noneClaim 7Unassignednot foundNo quote recorded.
Quote basis: not recorded.
court · 2023-10-10
www.courtlistener.com/recap/gov.uscourts.cand.327471/gov.uscourts.cand.327471.1183.0_2.pdf
Claim 9Unassignedconfirmed“The $725 million Settlement Fund is a substantial portion of the maximum monetary relief that the Class could realistically recover”
Quote basis: not recorded.
noneClaim 10Unassignednot foundNo quote recorded.
Quote basis: not recorded.

Source vault

Link status: Candidate - not yet fetched

DocumentLast fetchPDF
Privacy policy
facebook.com/privacy/policy/
Not fetched yetNO (HTML only)
Terms of service
facebook.com/terms.php ; instagram.com/legal/terms/ ; whatsapp.com/legal/terms-of-service
Not fetched yetNO (HTML only)
Website
meta.com
Not fetched yet—
Primary source
https://www.ftc.gov/news-events/news/press-releases/2019/07/ftc-imposes-5-billion-penalty-sweeping-new-privacy-restrictions-facebook
Verification: Verified - primary source confirmed
Not fetched yet—

Enforcement

No enforcement actions are linked to this row.

State statute

Headquarters on file: California. Provisions of CCPA/CPRA on file:

ProvisionTypeSource
Right to Deletion
Cal. Civ. Code § 1798.105
hardsource
Right to Correction
Cal. Civ. Code § 1798.106
hardsource
Right to Know / Access
Cal. Civ. Code § 1798.110
hardsource
Right to Limit Use of Sensitive Personal Information
Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027
hardsource
Right to Data Portability
Cal. Civ. Code § 1798.130(a)(3)(B)(iii)
hardsource
Privacy Policy / Privacy Notice Requirements
Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011
hardsource
Sensitive Personal Information — Categories
Cal. Civ. Code § 1798.140(ae)
hardsource
Service Provider and Contractor Contract Requirements
Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051
hardsource
Applicability Threshold (2025 CPI-Adjusted)
Cal. Civ. Code § 1798.140(d)
thresholdsource
Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026)
Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157
hardsource
Right to Opt Out of Sale or Sharing
Cal. Civ. Code §§ 1798.120, 1798.135
hardsource
Sale vs. Sharing Distinction
Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah)
hardsource
Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted)
Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206
hardsource
Notice at Collection
Cal. Code Regs. tit. 11, § 7012
hardsource
Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026)
Cal. Code Regs. tit. 11, §§ 7120-7124
hardsource
Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights
Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16)
hardsource