{
  "slug": "google-messages",
  "category": "messengers",
  "name": "Google Messages",
  "description": "Google's default SMS, MMS and RCS messaging app for Android, with a paired web client. RCS chats between Google Messages users are end-to-end encrypted automatically; SMS and MMS are not.",
  "website": "https://messages.google.com",
  "license": null,
  "platforms": [
    "android",
    "web"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 17,
  "coverage": 100,
  "summary": "Google Messages scores 17 out of 100 (grade F) on the messengers criteria. It partly meets no trackers or telemetry and end-to-end encrypted by default. It does not meet open source, no ads or data sales, independent audit, no phone number needed, metadata protection and decentralized. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/messengers/google-messages/",
  "markdown": "https://privacyratings.com/messengers/google-messages/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://reports.exodus-privacy.eu.org/en/reports/com.google.android.apps.messaging/latest/",
      "note": "Exodus finds no third-party trackers, but Google collects app usage and diagnostic data by default."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "no",
      "evidence": "https://policies.google.com/privacy",
      "note": "The app shows no ads, but it is provided free by Google, whose privacy policy uses activity across its services to fund and personalize advertising."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "e2ee_default": {
      "title": "End-to-end encrypted by default",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://support.google.com/messages/answer/10262381",
      "note": "RCS chats, including groups, are end-to-end encrypted automatically only when all participants use a supporting app; SMS and MMS are never encrypted."
    },
    "no_phone_number": {
      "title": "No phone number needed",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Messages are sent and received with the phone number of the SIM, which is visible to recipients."
    },
    "metadata_protection": {
      "title": "Metadata protection",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Google and carriers see who talks to whom."
    },
    "decentralized": {
      "title": "Decentralized",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "RCS runs through carrier and Google servers that users cannot run themselves."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:38:22.261Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}