# Conversations privacy rating

XMPP (Jabber) client for Android that works with any standard XMPP server, with OMEMO end-to-end encryption on by default for one-to-one and private group chats.

## Summary

Conversations scores 83 out of 100 (grade B) on the messengers criteria. It meets 6 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted by default, no phone number needed and decentralized. It partly meets independent audit. It does not meet metadata protection.

- Website: https://conversations.im
- Source code: https://codeberg.org/iNPUTmice/Conversations
- Platforms: Android
- Home page trackers: none found
- Category: [Messengers](https://privacyratings.com/messengers/)
- Grade: B (83/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | GPL-3.0, and it works with open-source XMPP servers such as Prosody and ejabberd. | https://codeberg.org/iNPUTmice/Conversations/src/branch/master/LICENSE |
| No trackers or telemetry | Yes | Exodus finds no trackers in the Android app. | https://reports.exodus-privacy.eu.org/en/reports/eu.siacs.conversations/latest/ |
| No ads or data sales | Yes | Sold as a paid app on Google Play and free on F-Droid, with no ads. | https://play.google.com/store/apps/details?id=eu.siacs.conversations |
| Independent audit | Partial | A full cryptographic analysis of OMEMO, including its Conversations implementation, is public but older than three years. | https://conversations.im/omemo/audit.pdf |
| End-to-end encrypted by default | Yes | OMEMO end-to-end encryption is on by default for one-to-one and private group chats; public group chats are not encrypted. | https://codeberg.org/iNPUTmice/Conversations/src/branch/master/README.md |
| No phone number needed | Yes | Accounts are XMPP addresses on any server; no phone number is needed. | https://conversations.im |
| Metadata protection | No | The user's XMPP server stores the contact list and sees who talks to whom. |  |
| Decentralized | Yes | XMPP is federated, so users on different servers can message each other and anyone can run a server. | https://conversations.im/#xmpp |

Source: https://privacyratings.com/messengers/conversations/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/messengers/conversations.md