Facebook Messenger App Privacy

The Truth About the Facebook Messenger App and Your Privacy

Facebook Messenger App Privacy
Recently Updated!
This article was just recently updated with new information on October 17, 2017.

Chances are that if you use Facebook today (and those chances are high because Facebook just passed over 2 billion active users), you have heard all the hype about the Facebook Messenger App and concerns over Facebook Messenger privacy. Users are now being forced to download the separate Facebook Messenger App if they want to use messaging through the Facebook app itself for mobile. Not only is that a burden, but Facebook asks for more permissions than the average app in order for you to be able to download the app and, let’s be honest, the permissions are a little frightening when you start looking into them.


So, should you be worried about your privacy if you download the Facebook Messenger App? Should you not? What do the permissions actually mean and why does Facebook need them? Is Facebook the only app with these "invasive" permissions? This post hopes to answer all that.

I want to start with reacting to a video that I saw shared around social media a few years ago when I wrote this post. In it, two news anchors were discussing the recent Facebook Messenger App and how many users are worried that Facebook is crossing the line and invading everyone's privacy. Then, they referred to a "Tech Expert" named Anthony Mongeluzo who talked about how Facebook can use the permissions that you agree to in order to "use your recording device and your camera device on your phone without even telling you". Also, he stated that if you text someone that you want something (such as a "Nike Fit Band" as he refers to it), that Facebook will start popping up ads for "Nike Fit Bands".

NONE of this is true! Nowhere in the permissions does it say that it can use your camera or microphone at any time. Furthermore, if you text someone that you want something, ads will not start popping up on Facebook for that item. If anything, it will be using the cookies within your browser and the pages you've visited to give you "relevant" ads. This "Tech Expert" Anthony is a sad excuse for an expert. He refers to the WhatsApp Messenger App as "What's Up App" and calls Nike FuelBands "Nike Fit Bands". Just because you heard it from a "news source" online does not mean it's true. The media loves to scare people because it causes buzz and causes their story to get out there and people to listen.

Secondly, let me get this out there.

If you have the regular Facebook App downloaded, you already have agreed to nearly all the permissions that the Facebook Messenger App requests!

Yes, you heard that correctly. The regular Facebook app (not the Messenger app) uses nearly all the same permissions as the Messenger app does.

Don't believe me? Check this out (click on picture for full size):

As of Facebook version 145.0.0.37.86 and Facebook Messenger version 139.0.0.17.85

Facebook Mobile App Privacy Permissions List
Facebook Messenger App Privacy Permissions List

In the above pictures, you'll see screenshots of the Facebook app and the Messenger app's permissions (with some overlap) laid out side by side. After reading through them, some of them stand out as being pretty scary if you've never looked into these before (some are listed below).

Messenger App Examples:

  • directly call phone numbers
  • receive and read your text messages (SMS or MMS)
  • take pictures and videos
  • record audio
  • change network connectivity
  • download files without notification
  • read calendar events plus confidential information
Facebook App Examples:

  • read your text messages (SMS or MMS)
  • take pictures and videos
  • record audio
  • change network connectivity
  • download files without notification
  • read calendar events plus confidential information

Notice that many of the permissions are the same, and the two apps request nearly identical permissions (with a few differences). After all, you are able to call people directly using the Facebook Messenger app which explains why it has a few differences from the regular Facebook app such as permission to directly call phone numbers.

Why does Facebook need these permissions?

Well, Facebook has some pages in their Help Center to explain to users what the permissions are used for. The pages have an explanation for both the regular Facebook App and the Facebook Messenger App.

See these links:

Some examples Facebook provides as to why they need those permissions (can also be found in the links above):

  • Read your text messages (SMS or MMS) - If you add a phone number to your account, this allows us to confirm your phone number automatically by finding the confirmation code that we send via text message.
  • Take pictures and video - This permission allows you to take photos and videos within the Messenger app to easily send to your friends and other contacts.
  • Record audio - This permission allows you to send voice messages, make free voice calls, and send videos within Messenger.
  • Directly call phone numbers - This permission allows you to call a Messenger contact by tapping on the person's phone number, found in a menu within your message thread with the person.
  • Read calendar events plus confidential information - This allows the app to show your calendar availability (based on your phone’s calendar) when you’re viewing an event on Facebook.

Another thing that is important to note -- An application needs permissions in order to get its features to work. I have even developed some basic Android apps in the past for fun that required some of these permissions. For example, if there is a button within your application that allows the user to take a picture or video, the developer needs to require permissions to take pictures and videos along with the permission to record audio. Otherwise, that button is useless because it won't do anything. Simple as that.

Is Facebook the only app with these "invasive" permissions?

Absolutely not. This is something that you would think is common sense, but apparently it's not. There are plenty of other apps out there that use many of these same permissions.

Here is a list of most of the "invasive" permissions listed above that the Facebook and Messenger App use along with other popular apps that use those same permissions:

I think you get the point. In my research, the app that surprised me the most was AVG AntiVirus Security. It requested nearly all the same permissions as the Facebook Messenger App except for a couple. Yet, I don't see everyone up in arms about their privacy when they download AVG... quick! Somebody tell the media. Perhaps they can make a video to scare everyone about it.

Should you be worried about your privacy with the Facebook Messenger App or no?

The answer is NO! The point I'm trying to make with this post is that... you shouldn't be any more worried about your privacy than you were before the Messenger App became mandatory in order to access your messages through the regular Facebook App.

Why? Because it uses almost every single permission that the regular Facebook App uses. Not to mention, based on the number of downloads listed for the other popular apps above, chances are that you use at least one of those apps and those apps use many of the same permissions as the Facebook Messenger App.

If you truly still believe that Facebook can "access your recording devices at any time", well guess what, you agreed to those same permissions with the regular Facebook App, or WhatsApp, or Skype, or Snapchat, or many other apps.

The bottom line...

Is that Facebook is using the information they gather about each individual user so that they can sell that information to third-party companies. This is how Facebook monetizes the data they receive. Without it, they wouldn't be in business. Not sure how your data is used? You can poke through the various categories on the Facebook Data Use Policy page.

The part we should be worried about is the fact that, regardless of any permission that any app could ever ask us, much of online Internet data (whether that be Facebook chats, websites visited, pictures sent, etc.) goes directly to the NSA because apparently we all need to be tracked. But that's a whole other conversation...

Still not convinced and want alternatives?

Easy. You don't have to download the Messenger App. You can access your messages via the desktop version of Facebook. Or... you could just use another messaging app! There are plenty out there -- WhatsApp, Kik, Skype, etc.

Happy messaging!

Comments 103

  1. Facebook Messenger is like a frickin virus. It takes over your SMS, phone, contacts, and they force you to download it just so you can view your facebook messages. Chat heads pop up automatically, dominating your phone.

    In essence, Facebook is trying to hijack your (at least Android) phone without taking the time to build their own operating system.

    I use Metal. Facebooks two apps are over a gig and Metal is less than a quarter of that and far less intrusive.

    Sorry, I didn’t buy my damn phone from Facebook – so you can’t take it over and make it my Facebook phone. People who take this lying down are idiots. My facebook app should be just that – for facebook. It shouldn’t be taking over my text messages or phone calls – period.

    These updates are a sly way of installing bloated crap.

    1. Post
      Author

      I understand some of your frustrations. You should also keep in mind that many of those things are customizable. For example, you talked about the chat heads popping up and dominating your phone. Those can easily be turned off with a switch in settings. I turned mine off right away.

    2. I am having problems with people claiming to be someone else..
      It’s always about money and it’s causing issues with my friends and I because I can’t tell if it’s them or not. It is really becoming a huge problem.

    3. Ok I have an android phone and I am with T-Mobile now I know why these advertisements keep popping up and yes I need to get rid of them but when I go to settings and turn off the notification I am still getting all that stuff and I am sick of it. How do I go in and turn off what ever I need to turn off so it stops. I am not a high profile electronics person. I am 59 and frustrated with all that’s on my phone that you have to have on there because that’s the way the phone is set up but I would just like to have pictures, gallery, text and phone and google and get rid of everything else and I know I have to have part of what I’ve got. I have another question if I am on Facebook messenger can other people besides the one I sent the message to see what I typed? I think that stinks if they can. I was pretty sure that was just an one on one conversation.

      1. Post
        Author

        Hi Diane, as far as T-Mobile’s advertisements go, I’m not sure the best way to shut those off. The ads shown are usually on a carrier-to-carrier basis, and I have never had T-Mobile before. Also, for the second part of your comment, if you send a message to somebody on Facebook Messenger, only they can see that message. The only way someone else would be able to see it is if someone else was looking over your shoulder at one of your phones while you were messaging that person. Hope that helps!

  2. This is strange, but I have been able to access my messages on the mobile version of chrome without any issues, but just recently (past 2 days), i’ve had “block ups” that tell me i will soon be unable to access messages unless I download messenger.

    Seems a bit heavy-handed to me.

    They already have a perfectly reliable messaging system with multiple platforms for use. I can’t believe they are solely interested in my satisfaction; if they were, they would leave well enough alone.

    No, they are purely interested in monetization of my personal information.

    For what it’s worth, they permission descriptions discussed are not part of any contract or EULA, so they should be considered what they are: one aspect of permission usage.

    I have no doubt that they will bundle the metadata from sms and text messages with other collected data to better profile their users and profit off of them.

    I understand that the product they offer is contingent upon that data being used, but I am not nor should I be expected to willingly forfeit all expectations of privacy. I will delete my account before I do that.

    1. Post
      Author
  3. I find it interesting that in this article it is stated “Furthermore, if you text someone that you want something, ads will not start popping up on Facebook for that item.” – yet my wife experienced almost exactly that a few days ago! She had directly Private Messaged a friend on Messenger and shared a recipe for a dessert and within minutes she received a notification from Pinterest about Pins she may be interested in, and those pins were all about that recipe!

    How did THAT happen???

    1. Post
      Author

      If she private messaged a friend about a recipe for a dessert, she more than likely visited the website for that dessert recipe. Therefore, if she visited the website for that dessert recipe, there were cookies in her browser that remembered what page she visited and she received relevant ads/pages from that. The action of her private messaging it to her friend had nothing to do with that.

  4. I am still able to access fb messages by using the desktop version. I bookmarked it on my iPhone’s safari so it’s easy to use but annoying bc you need to zoom and zoom out. It can also be quite glitchy.

    1. Post
      Author

      Yeah I know what you mean. It’s basically using the desktop version of the website on your phone so it’s not optimized for a mobile screen hence why you have to zoom in and out and why it doesn’t appear to work very smoothly. But that’s one way to do it!

  5. My husband pulled out our air conditioner air filter 2 days ago. Noticed it was dirty. He went to work and I texted him a reminder from my phone to pick one up on his way back. I did not email him, send him a FB message, or search “air filters” on my computer. In fact, the words “air filter” or anything related have not been typed onto this computer whatsoever, and it is the only computer I use. My husband does not use this computer either, and none of my accounts are active on his computer. This morning I noticed there are air filter ads on my FB feed. Can you explain what may have happened because I find this all too strange and encroaching.

    1. Post
      Author
    2. My parter had an interesting one, had a big fight with her mother, didn’t visit any pages related to counseling or family problems or anything like that. Just Pm’ed through facebook some friends about it, that night persistent adverts popping up for family counseling. For the life of me I can’t see what she did other than private message to cause that.

  6. Dear Crambler,

    I learned a lot from reading your article and other people’s comments and reactions. Thanks so much for doing this!

    P.S. I am one of those reluctant users of Facebook that doesn’t trust the enterprise one bit.

    1. Post
      Author
  7. Anyone use WhatsApp along with Facebook Messenger? I have both and I think I got one message from WhatsApp. Thinking about getting rid of that and keeping Messenger for the time being. Thoughts?

    1. Post
      Author
  8. What I like about WhatsApp vs Messenger is that it’s end to end encrypted and has two factor authentication. No snooping like there is with Messenger.

    1. Post
      Author

      That’s certainly nice! I am thinking more and more about trying WhatsApp out. I love the fact that they have end-to-end encryption in their messages – helps make people feel safe and that their information is secure. I was just reading about it on their site! Thanks for the comment, Doug!

  9. This is very interesting. Thanks for all of the info.

    Today a retired cop I work with told me she uninstalled Messenger. She said she just read something about the latest update allowing it to use the app via your camera and mic to spy on you.

    She isn’t a paranoid person. I’ve been searching to see if I can find what she read. She doesn’t remember the particular resource.

    Have you heard anything about this? I uninstalled the app. I have been able to access it using Puffin browser app in desktop mode.

    1. Post
      Author

      Thanks for the comment, Susan! No, I have not heard of that at all. If that were actually happening, that would be a huge privacy breach and word would get out fast if that were actually true. The app needs access to your camera and mic so that you can make video calls or audio calls from the app, just as thousands of others app do the same.

    1. Post
      Author
  10. Today I read the updated Terms for Use and agreement for Snapchat. Seems like we are getting very naive – they dare to publish it in “layman” terms making it easier to grasp the true nature and meaning. My advise; stop using all services that demands access to Your Life and Privacy.
    They benefit greatly by harvesting, storing and later on selling that data. And you suspect nothing.

    1. Post
      Author

      Hi Eric,

      Reading the Terms of Use and Privacy Policy is always a good idea with any company if people are concerned about the privacy of their data. Although, I agree, many companies have a bunch of “legal jargon” written in there which makes it hard for the average person to understand. Thanks for leaving a comment!

  11. Have you heard about people getting hacked or having their identity stolen from using the Facebook Messenger App? This has happened to a couple of people that I know which is what makes me nervous!

    Thank you for the article – very helpful! I’m still on the fence, but this helped clarify a bit.

    1. Post
      Author

      Hi Kris! No, I have not heard of that. The only way I can see that happening is if someone gave out all their sensitive information to someone who was pretending to be somebody else online on the Facebook Messenger App. There will always be “hackers” out there trying to get information they’re not supposed to have. Always be smart online!

  12. My question is if I have someone on messenger can they still access my Facebook if I have them block on Facebook and not my friend on Facebook

    1. Post
      Author

      If you have somebody completely blocked on Facebook, they should never be able to see your profile or anything. In fact, your name won’t even pop up if they try and search it.

    1. Post
      Author

      Hi Harry! No, I have not used the Signal app before, but I have read a couple articles on it. Sounds like if it was more widely adopted, it could be a good alternative!

  13. Scrambler, thank you for all the good information about FACEBOOK Messenger. I read all the other comments against it and decided to go ahead and install it. You made me less afraid. I did install it once and got scared after 2 or so days and uninstalled it. So I’ll go ahead and keep it. Thanks again. Sandy

    1. Post
      Author
  14. Hello! During HOLIDAYS is it safe to send “pass it on” emojis messages? I just freaked out some of my Messenger friends when I sent one for “Happy 2018”
    Thank you

    1. Post
      Author

      I generally advise against chain messages that get spread like wildfire. Not because all of them are unsafe, but they’re kind of pointless in my opinion and may have malicious links in them.

  15. Somebody just sent me on Messenger that video of the two TV anchors talking about Messenger and suggesting uninstalling Messenger, so I googled it and came across your article, which I found very informative. I have been using both Messenger and WhatsApp for a couple of years now with no issues.

    1. Post
      Author
  16. A couple of years ago I watched a Danish movie called Iris (Siri backwards) about a Facebook like app that spied on people and collected their data for its evil developer. The movie was accompanied by an app that one downloaded at the movie which controlled your phone showing you what the app was seeing – which was different from what one was watching on the big screen.
    For example. On the big screen, you might see a secretary knocking on the principal’s door, but then your phone would vibrate, notifying you that “Iris” was active and you would see the principal having sex with a student- what IRIS was watching behind the door. Before the credits had even started rolling, viewers were frantically deleting this movie app from their phones.
    It made me laugh (albeit nervously) but if they COULD control your phone even if only for broadcasting purposes, then what are the capabilities when you GIVE your access permissions?
    I never downloaded the Facebook app- I have links to desktop site on my phone. I definitely didn’t download messenger- however my iPhone seems to know- and I can only access messages from my PC.
    SIRI turns on all by itself sometimes when I’m in a meeting and My phone is sitting dark on my desk.
    Yes, I believe everything the newscasters said way back then, especially after the last election. Messenger is always ON even when you turn it off. You can’t delete it from your cloud – you have to establish a whole new account with a different ISP, different hardware, different number. It remembers.
    And it sends you invitations from your friends – except they aren’t true invitations from your friends but instead “suggestions” disguised as invitations. It sent an invitation from my old Facebook account to a newer one I recently opened- and I don’t have the app installed under either account.

    1. Post
      Author
  17. I deactivated my Facebook account. Had a friend tell me that they messaged me. I downloaded the messenger app and placed my phone number, but I’m asked to sign in with Facebook. Will signing into reactivate my Facebook account?

    1. Post
      Author

      Hi Nita! I’m not exactly sure if you need an active Facebook account to use Messenger – I’m guessing you do. However, you could test using Messenger and see if Facebook asks you to reactivate your account. If they do, you can always just decline!

  18. You don’t need a FB account to use messenger. Just a phone number which is …what it is. I like the good ol days of just providing a junk email account for apps. Because like the Author stated.. NSA tracks everyone. But private corporations track EVEN MORE because there is little to no over site . I didn’t invent the game, but those are the rules. Plan accordingly.

    1. Post
      Author
  19. The more I read about things like that the more I start to think that people can not read sentences.
    When you install Facebook Messenger is asks you – Do you want Messenger to be your default app for SMS and Calling. If you say yes, you will give it access to your texts and calls. Is that really a surprise? In order to handle SMS you give access to SMS, lol.

    I do not like how Messenger handles sms and calls, so I opted out and so my Messenger app have only access to camera, storage and microphone (calls and files, makes sense, right?).

    My Facebook app have only access to storage (posting photos, anyone?).

    Those setting were like that by default. I have not touched anything. I have no idea how people come with those conspiracy theories.

    1. Post
      Author

      I agree, Tom! Some of the permissions it asks you for are common sense. If you are using Facebook Messenger for SMS, it will obviously need access to send and receive SMS messages 🙂 And like you mentioned, anyone can opt out of those permissions if they would like.

  20. one question… I have removed my messenger app’s DATA from my Android mobile phone. But when I try to open the same app again, then it is showing my last login username if I click on that then it will start login with that username and password which I had given when I done last login .

    Why App data clear is not removing all the messenger app data?

  21. My son and his girlfriend had a face to face conversation about a song they both liked. No googling. Within 10 minutes they were both seeing ads to download that song. My friend had a phone conversation about camping equipment. No googling. Within minutes he was seeing ads for tents etc. on his browser. I went to the doctor, received a diagnosis, texted my wife. No googling. Before I could even get home, I was seeing ads about treatments. I understand that my cookies can be used. But explain how voice conversations, phone or otherwise, and text messages are triggering this cookie usage. There is a difference between permission to use certain data and permission to spy and gather intel 24/7. I unplugged from all of it in March.

    1. Post
      Author

      Hi RV, I have tried what you explain here at least a couple dozen times and have never seen ads pop up about things I’m talking about. I have heard stories similar to yours, and that’s why I’ve wanted to try it myself. There has to be something else involved, it’s just a matter of figuring out what. However, I do agree… you should never see ads for something you are talking about if you didn’t specifically ask Google or search it online.

Leave a Reply

Your email address will not be published. Required fields are marked *