Social Platforms
Folder: 04 - TECHNOLOGY & SURVEILLANCE Source note: SRC - Social Platforms
How To Read This Note
This note covers the platforms that don’t require full individual notes but need to be documented honestly.
The honest version of this section requires something most privacy writing avoids: acknowledging when a platform is genuinely better than its reputation suggests. The vault says what the evidence shows — in both directions.
For WhatsApp see Meta. For TikTok see TikTok. For YouTube see Google & Alphabet. For Spotify see Spotify.
Reddit has 1.5 billion monthly active users as of 2024. It is the internet’s largest repository of human opinion, experience, and knowledge — organised by topic, searchable, and largely public. #verified
The AI data sale: In February 2024 Reddit signed a $60 million annual licensing deal with Google to train AI models on its content. It subsequently signed deals with other AI companies. Every post, comment, and thread ever written on Reddit is now licensed AI training data. verified
Reddit users created this content for free. Reddit sold it without additional consent. The terms of service technically permitted this. The users were not informed, consulted, or compensated.
When the mod community protested in June 2023 — coordinating the largest blackout in Reddit history with thousands of subreddits going dark — Reddit threatened to remove moderators who did not comply with reopening. The protest was broken. The deals went ahead. #verified
What Reddit collects:
- Account information
- Post and comment history
- Upvote and downvote patterns
- Search history on Reddit
- Location data
- Device information
- IP address
- Viewing history including communities visited without posting
Reddit keeps user data for 90 days after account deletion. #verified
The honest counterpoint: Reddit ranked among the least privacy-invasive major platforms in Incogni’s 2024 and 2025 Social Media Privacy Rankings — primarily because it collects less sensitive personal data than Meta, Google, or LinkedIn and has fewer regulatory transgressions on record. That ranking predates full accounting of the AI licensing deals. The data sale to Google is the story that matters most here. #credible
Discord
Discord has approximately 200 million monthly active users. It is primarily used for community building around gaming, music, creative work, and interest groups.
What it collects: verified
- Messages — not encrypted by default in servers or DMs
- Voice and video call metadata
- Server membership and activity
- Device and network information
- IP address
- Purchase history
The honest assessment — better than its reputation on most metrics:
In Incogni’s 2025 Social Media Privacy Ranking Discord ranked first — the most privacy-respectful of the fifteen major platforms studied. Discord does not use or permit user data for generative AI training, has fewer regulatory transgressions than most competitors, and has a relatively transparent privacy policy. verified
This does not mean Discord is safe. It means it is better than most alternatives on specific measurable criteria.
The Age Verification Push — February 2026: verified
This is the most important Discord development in the vault and it is happening right now.
On February 9, 2026 Discord announced mandatory age verification rolling out globally in March 2026. The system requires users wanting full platform access to submit either a government-issued ID or a facial scan for age estimation.
The internet reacted immediately. The backlash was significant enough that on February 25, 2026 — two weeks after the announcement — Discord delayed the global rollout to the second half of 2026.
What the system does: Discord states that 90%+ of users will never be prompted to verify because an internal AI system already estimates their age from account-level signals — how long the account has existed, whether a payment method is on file, what servers they are in, and general behavioural patterns.
The remaining users — those trying to access age-restricted content or change default safety settings — will be asked to verify via facial age estimation or government ID upload. verified
What makes this significant:
One of Discord’s original verification partners was Persona — a company with documented connections to Palantir, the surveillance software used by governments worldwide, and an ongoing partnership with OpenAI. Discord stated Persona “did not meet the bar” for on-device facial processing and dropped them after the backlash. They are currently using k-ID globally and a replacement UK partner. verified
The EFF stated plainly: age verification mandates are a censorship and surveillance nightmare — ushering in a new age of online surveillance and exclusion for everyone, not just young people. verified
The workarounds for the facial scan were circulating online within days of the announcement. The system will not reliably stop determined minors. What it will reliably do is build a database of government IDs and facial data linked to Discord accounts — for 200 million users — in the hands of a private company and its third-party verification vendors. credible
The 2025 data breach precedent: In September 2025 a third party vendor (Zendesk) breach exposed approximately 70,000 users’ government IDs and selfies that had already been submitted for age verification. Discord is now voluntarily expanding that system to potentially hundreds of millions of users. verified
The September 2025 Spy.pet mass scrape: verified A service called Spy.pet scraped and sold over 4 billion public Discord messages from 14,201 servers — exposing the digital footprints of nearly 628 million users. The service operated for months before being discovered.
The pattern: Discord is being pushed — partly by legislation in the UK, Australia, and Brazil, partly voluntarily — toward becoming an identity-verified platform. The privacy advantages it currently holds over competitors are directly threatened by this direction of travel.
A platform where you could participate anonymously is becoming a platform where your real identity is tied to your account. theory — but the trajectory is fully documented.
Current status: Global rollout delayed to second half of 2026. Already live for UK and Australian users due to legal obligations. Monitor for updates. #investigate
Telegram
Telegram has approximately 950 million monthly active users. It was built on a reputation for privacy and resistance to government data requests. That reputation is now definitively out of date. verified
The default encryption problem: Telegram’s default chats — including all group chats and channels — are NOT end-to-end encrypted. They are stored on Telegram’s servers and are accessible to Telegram and to law enforcement with a valid request.
Only “Secret Chats” — a feature most users never use — are end-to-end encrypted. This has always been true. It was rarely clearly communicated. #verified
The Durov arrest — August 2024: Telegram founder Pavel Durov was arrested by French police at Le Bourget Airport on August 24, 2024, under a warrant related to alleged lack of content moderation and facilitation of criminal activity on the platform.
In September 2024 — within weeks of the arrest — Telegram amended its privacy policy to commit to providing user IP addresses and phone numbers to law enforcement upon valid legal requests.
The platform that resisted all government data requests for years changed its policy within weeks of its founder being detained. #verified
The compliance explosion: The numbers document the shift precisely:
- January to September 2024: 14 US law enforcement requests fulfilled — 108 users affected
- Full year 2024: 900 US requests fulfilled — 2,253 users affected
- Q1 2025 alone: 22,777 users globally — a 4x increase from Q1 2024
Freedom of the Press Foundation and Human Rights Watch both confirmed and documented this trajectory. verified
The data retention advantage: Despite everything above, Telegram deletes user data in one day after account deletion — the fastest of any major platform by a significant margin. For what it is worth. verified
The honest summary: Telegram is not a privacy platform. It never fully was — its default chats were always server-stored and readable. The post-Durov compliance shift removed the last plausible privacy claim. Use Signal for anything sensitive.
Signal — The Honest Alternative
Signal is included here not as a surveillance subject but as the documented alternative that every other note in this section points toward.
What Signal is: verified
- Open source
- End-to-end encrypted by default for all messages, calls, and group chats
- Operated by a non-profit foundation
- Collects the minimum data technically required to function: your phone number and the date you registered
- Cannot read your messages
- Cannot hand your message content to law enforcement because it does not have it
- Disappearing messages available
- Note to self feature for private encrypted notes
When the US government subpoenaed Signal in 2021: Signal’s response to the grand jury subpoena was to produce two pieces of data — the date the account was created and the date it last connected to Signal servers. That was all they had. That was all they could hand over. verified
The one vulnerability: Signal protects your messages. It cannot protect your phone number from being known to the people you message. And if the person you are messaging has Microsoft Recall enabled on their Windows device, your messages will appear in their screenshot database regardless of Signal’s encryption. The weakness is the endpoint, not the channel.
The recommendation: For private communication: Signal over everything else. Not because it is perfect. Because the architecture of minimal data collection is the only architecture that actually protects you when a government shows up with a subpoena.
Snapchat
Snapchat’s disappearing message mechanic created an illusion of privacy that its data practices do not support.
Snapchat collects: location data (Snap Map), device identifiers, usage patterns, and contact lists. It keeps user data for 60 days after account deletion. It has been charged by the FTC for privacy violations. It uses user data for AI training with an opt-out available in settings.
The disappearing messages do not disappear from Snapchat’s servers until their retention period expires. Recipients can screenshot before they disappear. Snap notifies the sender — but the screenshot already exists. verified
LinkedIn is owned by Microsoft. It is the professional identity layer of the Microsoft surveillance ecosystem.
LinkedIn collects: employment history, salary expectations, career aspirations, professional network relationships, skills, endorsements, and the implicit data of who you look at, what jobs you apply for, and what content you engage with.
It is the only major social platform that may collect users’ race or ethnicity data. It uses data for AI training. It has 31 of 38 possible data types interacted with on Android — second only to Facebook and Instagram. #verified
Cross-referenced with Microsoft account data and Windows telemetry, LinkedIn creates a professional and personal profile of significant depth available to one of the world’s largest corporations. See Microsoft
The Data Retention Summary
How long platforms keep your data after you delete your account: #verified
- Telegram: 1 day
- TikTok: 30 days
- X (Twitter): 30 days
- Snapchat: 60 days
- Reddit: 90 days
- WhatsApp: 90 days
- Discord: 180 days
- Facebook: 180 days
- Instagram: 180 days
- YouTube: 180 days
- Facebook Messenger: 180 days
Deleting your account does not delete your data immediately. It starts a clock. The length of that clock is a choice the platform makes — not you.
The Honest Ranking
(Incogni 2025 — 15 Platforms)
From least to most privacy invasive based on data collection, retention, regulatory history, AI training, and transparency: credible
Better end:
- Discord
- Telegram
- Snapchat
Worse end: 11. YouTube 12. Instagram 13. LinkedIn 14. Facebook 15. TikTok
Note: This ranking is from October 2025 and predates Telegram’s compliance explosion in Q1 2025. Telegram’s ranking would likely be significantly lower with updated data. #investigate
Linked Notes
Surveillance Capitalism · Meta · Google & Alphabet · TikTok · Microsoft · Digital Privacy & Protection · The Managed World · The Planetary Nervous System · I. The Observer · SRC - Social Platforms