Facebook offers video calling through Messenger, WhatsApp, and Facebook Portal devices. With billions of users worldwide, there is understandable concern around whether these calls are recorded and data collected.
Does Facebook record Messenger video calls?
Facebook states that they do not listen to or record Messenger audio or video calls. According to their data policy: “We do not access your microphone or camera during calls without your knowledge and permission. When you’re in a call with someone, we use data from your device microphone to carry your audio into the call.”
They claim voice and video calls use end-to-end encryption, meaning the calls are encrypted from your device to the device of the person you’re calling. Not even Facebook can access the contents. The keys to encrypt and decrypt the communication are stored on the users’ devices only.
However, some data related to the call is collected and stored by Facebook, including:
- Date and time of calls
- Call participants
- Some analytics such as call length, frequency, and aggregated usage metrics
Facebook states this metadata is used to improve their services and infrastructure. But it does not include the actual contents of your audio or video calls.
Does WhatsApp record video calls?
WhatsApp also uses end-to-end encryption for their voice and video calls according to their privacy policy. They state:
“Many messaging apps only encrypt messages between you and them, but WhatsApp’s end-to-end encryption ensures only you and the person you’re communicating with can read what is sent, and nobody in between, not even WhatsApp.”
Therefore, WhatsApp claims they cannot access or record the contents of your video calls. However, like Facebook Messenger, some metadata is collected and stored, including:
- Date and time of calls
- Call participants
- Some analytics like call length, frequency, etc.
This data may be used for operations and improving their systems, but not the actual call content itself.
Does Facebook Portal record video calls?
The Facebook Portal is a video calling device developed by Facebook. According to Facebook:
“Portal video calls are encrypted, so your calls are safe. That means only the people in the call can access the content – not Facebook, not anyone else.”
They also clearly state: “We don’t listen to, view, or keep the contents of your Portal video calls.”
However, Portal collects device data and information on call connections:
- Device settings
- Usage information
- Log data
- Wi-Fi information
Facebook states this is used to operate, improve, understand usage, and customize the Portal. But again, not the contents of the calls themselves.
Third-party access
While Facebook states they do not access call contents, there is still the question of government requests for data. Facebook’s transparency reports indicate they will provide information to law enforcement if compelled by governments and courts in criminal cases.
It’s unclear if this could include call contents, metadata, or something else. Facebook says they scrutinize each request and push back when they’re broad or vague, but ultimately may be forced to comply by law.
The risks of metadata collection
While Facebook does not record full audio or video calls, the metadata they collect can still reveal a lot about users and their connections. This information can include:
- Who you’re talking to
- When and for how long
- How often you communicate
- Your location and movements
Even though the call contents are encrypted and inaccessible, this metadata provides huge insights into your activities, habits, interests and relationships when analyzed at scale.
How Facebook may use call metadata
Facebook is able to monetize and use metadata to improve their products and services in various ways, including:
- Targeted advertising based on who you communicate with
- Optimizing Messenger, WhatsApp and Portal features and performance
- Linking call metadata with other data points to develop user profiles and insights
- inferring relationships and connections between users
- Informing artificial intelligence like facial/vocal recognition and natural language processing
While Facebook states they do not sell user metadata to third parties, they still utilize it extensively themselves to train algorithms and develop their business strategy.
Risks of third-party access
There are also risks of third parties exploiting weaknesses or vulnerabilities in Facebook’s systems to potentially access call data:
- Hackers may find security flaws to exploit and access data
- Regimes with poor human rights records may pressure Facebook for data access
- Employees or contractors may abuse access rights
- Stored data could be exposed in a breach
While Facebook claims protections against these risks, the large amount of sensitive data they hold does entice attacks and pressure from authorities.
How to protect your call privacy
If users want to minimize risks to their call privacy, here are some tips:
- Enable end-to-end encryption when available in messaging apps
- Be careful discussing sensitive topics that could be misused if accessed
- Limit metadata collection by restricting unnecessary app permissions
- Use user-managed open source tools like Signal with transparency reports
- Delete call history regularly
- Avoid combining accounts/apps where possible to limit data linkage
Ultimately each person needs to evaluate their own privacy threats and apply protections accordingly. While Facebook states protections, data collection still occurs presenting risks.
Facebook’s issues with user trust
Facebook has faced massive backlash over user privacy including:
- Cambridge Analytica scandal involving misuse of user data
- Multiple large-scale security breaches exposing user data
- Sharing extensive data with third-parties against user expectations
- Tracking users across the web and apps via pixels and social plugins
- Attempts to weaken encryption to expand access to user content
These issues have severely damaged user trust in Facebook’s claims around privacy. A 2021 eMarketer report showed over 25% of Facebook users distrust the company’s security policies.
Many believe Facebook prioritizes profits and shareholder returns over user privacy. Their business model involves monetizing user data for targeted advertising.
More transparency around how they handle and protect call metadata could help rebuild user trust. But Facebook will always face skepticism given their financial incentives.
The need for data regulations
With Facebook controlling communication platforms used by billions, many argue proper government regulations are needed to protect user privacy. Suggestions include:
- Requiring judicial oversight for data access requests
- Stronger encryption standards to limit access
- Allowing users to access all stored data profiles
- Restricting how metadata can be shared and monetized
- Harsher penalties for privacy violations
However, Facebook uses its extensive lobbying resources to resist regulations that may undermine its data collection abilities.
Conclusion
In summary, while Facebook claims they do not directly record or store the contents of audio and video calls, metadata is still collected presenting privacy risks. Users should understand how this data may be exploited and take steps to protect their communications if concerned. However, regulations may ultimately be needed to force accountability around data handling practices.