# SimpleX privacy rating

End-to-end encrypted messenger that has no user identifiers of any kind, not even random ones. Messages pass through relay servers that anyone can run.

## Summary

SimpleX scores 94 out of 100 (grade A) on the messengers criteria. It meets 7 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted by default, no phone number needed, metadata protection and decentralized. It partly meets independent audit. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US.

- Website: https://simplex.chat
- Source code: https://github.com/simplex-chat/simplex-chat
- License: AGPL-3.0
- Jurisdiction: United Kingdom. Five Eyes member. GDPR-style data protection law. CLOUD Act data access agreement with the US.
- Home page trackers: none found
- Category: [Messengers](https://privacyratings.com/messengers/)
- Grade: A (94/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | AGPL-3.0. | https://github.com/simplex-chat/simplex-chat/blob/stable/LICENSE |
| No trackers or telemetry | Yes | The privacy policy states client apps contain no tracking or analytics code. | https://simplex.chat/privacy/ |
| No ads or data sales | Yes | Funded by venture investment and donations, with no ads; the privacy policy states user data is not sold or monetized. | https://simplex.chat/faq/ |
| Independent audit | Partial | Trail of Bits reviewed the protocol design, but only a summary report is public; the earlier full audit is older than three years. | https://github.com/simplex-chat/simplex-chat/blob/stable/docs/SimpleX_Design_Review_2024_Summary_Report_12_08_2024.pdf |
| End-to-end encrypted by default | Yes | All direct and group messages and files are end-to-end encrypted with a quantum-resistant double ratchet. | https://simplex.chat/privacy/ |
| No phone number needed | Yes | No phone number, email or user ID is needed. | https://simplex.chat/privacy/ |
| Metadata protection | Yes | There are no user identifiers; each contact uses separate pairwise message queues, and private routing hides the sender IP from the recipient's server. | https://simplex.chat/privacy/ |
| Decentralized | Yes | Anyone can run SMP and XFTP relay servers, and users on different servers can message each other. | https://simplex.chat/docs/server.html |

Source: https://privacyratings.com/messengers/simplex/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/messengers/simplex.md