Productivity & Comms Apps · Messaging · Private litigation
Signal
Headline
An earlier draft of this row described an active class action against Signal; no record of any such case could be found, so none is asserted here.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
An earlier draft of this row described an active class action against Signal; no record of any such case could be found, so none is asserted here. The confirmed incident is narrower: a 2022 phishing attack on Twilio, Signal's phone-verification vendor, exposed phone numbers or verification codes for about 1,900 users. The honest framing matters here: Signal's protocol is peer-reviewed, its architecture is designed so the operator cannot read messages, and it retains famously little - subpoena responses have historically been able to produce almost nothing. Nothing verified this pass undermines the cryptographic guarantee. The genuine consumer lesson is narrower and still important: end-to-end encryption protects message CONTENT and does not protect device-level exposure, backups, or anyone who screenshots the conversation.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; no sources are on file yet, so no legal tier is assigned.
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — Signal is operated by the nonprofit Signal Foundation, which does not generate revenue in a traditional commercial sense, a genuinely different organizational structure from nearly every other company in this entire tracker.
Data sharing
UNVERIFIED LITIGATION REMOVED: an earlier draft described an active 2026 class action against Signal (Jan 2019-Dec 2024 class period, payout estimates); no court record or reporting of any such case could be found, so none is asserted. CONFIRMED VENDOR INCIDENT (2022): a phishing attack on Twilio, the vendor Signal used for phone-number verification, potentially exposed the phone numbers or SMS verification codes of about 1,900 Signal users (notified Aug 15-16, 2022); one account was re-registered by the attacker. Signal says message history, contact lists, profile information and PINs were not accessed.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy signal.org/legal/#privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service signal.org/legal/ | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.