Does Facebook Messenger collect my data?

Messenger is owned by Meta, whose business model is built on collecting data and metadata about its users. Even with end-to-end encrypted content, Meta's servers still process metadata about your conversations, and your Messenger activity sits inside the same account and identity graph that powers Facebook and Instagram. You also need a Facebook or Meta account, which is tied to your real identity.

Is OpenDescent a good Facebook Messenger alternative?

OpenDescent is end-to-end encrypted by default, peer-to-peer, requires no Meta account or phone number, and is not owned by a company with an advertising model. The honest caveats: it is currently Windows-first (macOS, Linux and mobile in progress), has a smaller user base, and has not yet been through a formal cryptographic audit. For the features it has, it does them privately and outside Meta's orbit.

OpenDescent vs Facebook Messenger: Privacy Compared (2026)

Q: Why use a private Messenger alternative if content is already encrypted?

Encrypted content is good, but it is not the whole picture. Messenger still relies on Meta's central servers, still processes substantial metadata, and still requires a real-name Meta account. Meta has also reduced privacy protections elsewhere, for example removing end-to-end encryption from Instagram DMs in 2026. A peer-to-peer messenger with no company in the middle removes the central server, the account requirement and the metadata custody in one go.

Short version

Messenger encrypts personal chats end-to-end by default. That's a real improvement and we don't dispute it.
Encrypted content is not the same as private. Messenger runs on Meta's infrastructure, which still handles substantial metadata: who you talk to, when, how often, from which device.
Messenger is built around a Facebook or Meta account tied to your real identity, and your conversations sit inside the same graph that powers Meta's advertising.
OpenDescent removes the company from the middle. There is no account, no phone number and no central server: your identity is a cryptographic keypair, not a profile.

Capability	OpenDescent	Messenger
Encryption
End-to-end encrypted by default	Yes	Yes · personal chats
Encryption depends on company policy	No · architectural	Yes · Meta's choice
Forward secrecy	Yes · per-message X25519	Yes
Fully open source	Yes · MIT	No
Independently verifiable implementation	Yes · you run it	No · servers closed
Trust model
Requires trusting a company	No company	Yes · Meta
Owned by Meta	No	Yes
Runs on a central server	No · peer-to-peer	Yes · Meta's
Subject to Meta privacy policy changes	No	Yes
Same parent as Instagram (encryption ended 2026)	No	Yes
Identity
Meta / Facebook account required	Never	Yes · required
Tied to your real name	No · keypair	Yes · profile
Phone number required	No	Commonly
Account recovery	12-word mnemonic	Meta account
Metadata
Who you talk to visible to company	No company	Yes
When and how often you message	Not collected	Processed server-side
Sits inside Meta identity graph	N/A	Yes
Feeds ad targeting context	No ads	Yes
Features
1-on-1 messaging	Yes	Yes
Group chats	Yes	Yes
Voice & video calls	Yes	Yes
Community hubs (Discord-style)	Yes	No
Facebook / Instagram integration	No	Deep
Disappearing messages	Roadmap	Yes
Cross-platform mobile	Roadmap (PWA)	Yes
Platform
Windows	Yes	Yes
macOS / Linux	Soon	Yes
iOS / Android	Roadmap	Yes
Price	Free · Pro £5/mo	Free

Meta deserves credit for switching personal chats in Messenger to end-to-end encryption by default. That genuinely protects message content. The gap is everything that sits around the content. Messenger still runs on Meta's central servers, still needs a Meta account, and still belongs to a company whose business is built on knowing things about its users.

Instagram DMs

Same company

E2E removed · 2026

Messenger

Same company

E2E on · today

Meta account

Same company

Real identity

The same board, the same privacy policy, the same advertising logic sits behind all of it. Content encryption is a setting. The account, the central server and the metadata are the architecture, and those don't change when the toggle does.

Why encrypted content isn't the whole story

It's easy to read "end-to-end encrypted" and assume the conversation is private in every sense. For the words you type, that holds. But three things sit outside that guarantee on Messenger:

Metadata still flows through Meta. Even when content is encrypted, Meta's infrastructure handles who you talk to, when, how often and from which device. That is valuable on its own, and it does not require reading a single message.
Your messaging lives inside your Meta identity. Messenger is anchored to a Facebook or Meta account tied to your real name. Your conversations are one part of a profile that already spans Facebook and Instagram.
The protection is a policy, not a wall. Encryption that depends on a company's current settings can be changed by that company. Meta removed end-to-end encryption from Instagram DMs in 2026, which is a reminder that these are decisions, not fixed properties.

▶ The structural point

Encrypting the message is good. But if the account, the server and the metadata all still run through one advertising company, the privacy you have is the privacy that company chooses to give you. OpenDescent removes the company entirely.

For the wider context on Meta's direction, our write-up on the Instagram change covers what was removed and why it matters: Instagram is ending DM encryption on May 8. We're careful not to overstate it: Messenger's default encryption is real today. The point is that "today" is doing a lot of work in that sentence.

We'd rather you make an informed choice than a loyal one. There are real situations where Messenger is the sensible tool right now, and pretending otherwise would be dishonest.

Everyone you know is already on it. A messenger is only as useful as the people in it. Messenger has billions of users, and reaching family or old friends who will never install anything new is exactly what it's good at.
You need it on your phone first. Messenger is mobile-first and runs on iOS and Android today. OpenDescent is currently Windows-first, with macOS, Linux and mobile in progress, so if your messaging mainly happens on a phone, Messenger covers that now.
You want deep Facebook and Instagram integration. If your social life runs through Meta's apps, Messenger's tight integration with Facebook, Instagram, Marketplace and events is a genuine convenience that a standalone tool won't replicate.

None of that is a knock on OpenDescent; it's just where each tool is today. Our pitch is narrower and honest: for the conversations where you'd rather not have a company in the middle at all, there is now an option built so there isn't one. You don't have to delete Messenger to keep a few conversations somewhere quieter.

▶ Our position

Use the right tool for the conversation. Keep Messenger for the people who'll never leave it. Move the conversations where privacy actually matters to something with no company in the middle.

Is Facebook Messenger encrypted?01

Yes. Meta rolled out end-to-end encryption by default for personal chats in Messenger, so message content is encrypted between you and the person you're talking to. The nuance worth keeping in mind: Messenger still runs on Meta's infrastructure, which handles substantial metadata, and your messaging sits inside your wider Meta account. Encrypting content and collecting metadata are two separate things.

Does Messenger collect my data?02

Messenger is owned by Meta, whose business is built on collecting data and metadata about users. Even with encrypted content, Meta's servers still process metadata about your conversations: who you talk to, when, how often, from which device. Your Messenger activity also sits in the same account and identity graph as Facebook and Instagram. OpenDescent has no company, no central server and nothing to aggregate.

Do I need a Facebook account to use Messenger?03

Messenger is built around a Facebook or Meta account tied to your real-name profile, and commonly a phone number. That identity is the centre of the product. OpenDescent works the other way round: your identity is a cryptographic keypair, not a real-name profile. There is no Meta account to create, no phone number to hand over, and nothing linking your conversations to an advertising graph. See how the identity model works.

Why use a private Messenger alternative if content is already encrypted?04

Because encrypted content is only one layer. Messenger still relies on Meta's central servers, still processes metadata, and still requires a real-name Meta account. Meta has also reduced privacy protections elsewhere, for example removing end-to-end encryption from Instagram DMs in 2026. A peer-to-peer messenger with no company in the middle removes the central server, the account and the metadata custody together, rather than relying on a setting staying switched on.

Is OpenDescent's encryption as good as Messenger's?05

Different implementation, comparable security properties for our threat model. OpenDescent uses ephemeral X25519 key agreement per message for forward secrecy, AES-256-GCM for content and Ed25519 for signatures, all standard primitives. It's fully open source under the MIT license, so you can read and run it yourself. The honest caveat: it hasn't been through a formal professional audit yet, and its user base is far smaller than Messenger's.

Is OpenDescent free?06

Yes, free and open source under the MIT license. There are no ads and no advertising partners, and no central server to aggregate data from even if we wanted to. An optional Pro subscription (£5/mo) for larger file transfers and more hubs funds the project. Every core feature is free. Download it here.

The Messenger alternative that doesn't run through Meta.

Feature-by-feature. Where the privacy actually sits.

Encrypted content, centralised everything else.

Why encrypted content isn't the whole story

When Messenger is the better choice today.

Questions, straight answers.

Private conversations with no company in the middle.