{
  "slug": "imessage",
  "category": "messengers",
  "name": "iMessage",
  "description": "Apple's end-to-end encrypted messaging service built into the Messages app on iPhone, iPad, Mac and other Apple devices, addressed by phone number or Apple Account email.",
  "website": "https://support.apple.com/messages",
  "license": null,
  "platforms": [
    "ios",
    "macos"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 42,
  "coverage": 100,
  "summary": "iMessage scores 42 out of 100 (grade D) on the messengers criteria. It meets 2 of 8 criteria: no ads or data sales and end-to-end encrypted by default. It partly meets no trackers or telemetry and no phone number needed. It does not meet open source, independent audit, metadata protection and decentralized. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/messengers/imessage/",
  "markdown": "https://privacyratings.com/messengers/imessage/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://www.apple.com/legal/privacy/data/en/device-analytics/",
      "note": "No third-party trackers in the app, and sharing device analytics with Apple is opt-in. Apple web pages load Apple's own analytics (ac-analytics, sent to metrics.apple.com) by default."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/en-ww/",
      "note": "Funded by Apple device sales, with no ads in Messages; the privacy policy states Apple does not sell personal data."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published; Apple has only published commissioned formal analyses of the PQ3 protocol."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "e2ee_default": {
      "title": "End-to-end encrypted by default",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://support.apple.com/guide/security/imessage-security-overview-secd9764312f/web",
      "note": "All iMessage chats, including groups, are end-to-end encrypted; iCloud backups of messages are only end-to-end encrypted with Advanced Data Protection, and SMS fallback is not encrypted."
    },
    "no_phone_number": {
      "title": "No phone number needed",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://support.apple.com/en-us/108647",
      "note": "Creating an Apple Account requires verifying a phone number, but iMessage can be used with an email address so the number is not shown to contacts."
    },
    "metadata_protection": {
      "title": "Metadata protection",
      "weight": 2,
      "answer": "no",
      "evidence": "https://www.apple.com/legal/privacy/data/en/messages/",
      "note": "Apple's servers route messages by sender and recipient and may keep the phone numbers and email addresses a user looks up for up to 30 days."
    },
    "decentralized": {
      "title": "Decentralized",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "One central service run by Apple."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:38:22.274Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}