They have sealed sender which improves contact privacy.

Worth a read about Signal's Sealed Sender and how it doesn't preserve its properties with receive and read receipts: https://news.ycombinator.com/item?id=46022279

▲

autoexec 11 hours ago | parent | prev [-]

That's outdated information.

https://signal.org/blog/sealed-sender/ says "By design, it does not store a record of your contacts, social graph, conversation list, location, user avatar, user profile name, group memberships, group titles, or group avatars."

However, today the reality is that signal collects your name, photo/avatar, and your contacts and stores it forever in the cloud.

see:

https://web.archive.org/web/20250117232443/https://www.vice....

https://web.archive.org/web/20230519120156/https://community...

▲

Yukonv 10 hours ago | parent [-]

Needs a big asterisk on “stores it forever in the cloud.” That information is end-to-end encrypted and not accessible to Signal or anyone else. If you don’t want that feature you can simply disable it.

[1] https://support.signal.org/hc/en-us/articles/360007059792-Si...

	▲	autoexec 10 hours ago \| parent [-]
		You can disable the pin but disabling the pin does not remove the data they already collected and stored in the cloud. If you decide to never create a pin in the first place, a pin is generated for you and your data is still uploaded and stored in the cloud forever. see https://web.archive.org/web/20230616082821/https://old.reddi... The data is avilable to anyone who brute forces the pin or uses an attack on SGX which has a history of being leaky. Note that they have been refusing to update their privacy policy after adding all the cloud storage. The fact that they don't make it extremely clear where, when, and how they store such sensitive data in their privacy policy should tell you everything you need to know about how trustworthy they are. In fact, the very first line of the privacy policy says that the service is designed to never collect and store sensitive information which used to be true, but is now a lie. It's a bad look for a service that advertises itself to whistleblowers, activists, and others whose lives and/or freedom depend on that information being safe. They should make it very clear to people what their risks are, but as it stands today Signal's website actually misleads them.