• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

How Telegram can be messy in privacy matters - Caveats

BBDragon

Lurker
Apr 9, 2021
3
0
(messenger app v7.6.0 on android v8)

It took me quite some efforts, time and stress to understand following points, I'd like to share with others.

- When I first create a Telegram account, Telegram is asking if my phone contacts can be read. If I accept (which everybody very likely will do, not aware of the consequences), Telegram will upload all my phone contacts on their (cloud) servers. In this process, Telegram will check 2 things: 1) is any on these contacts already member of their club (= already created a Telegram account before) AND 2) is any of these contacts having my phone number (the number I used for the Telegram account creation!). When I say "is having" it means that they have my phone number (known by Telegram) in the contacts which were synchronised (uploaded) with the Telegram servers, on their side. If both checks can be answered by yes, all these people will immediately be informed by a notification and chat creation, that I just joined Telegram! (The notification can be switched off in the app settings but the chat creation simply CANNOT!).

- If I don't change my privacy settings, any further contact I'll save in my phone contacts will be immediately uploaded (=synced) on the Telegram (cloud) servers and the process of automatic information (see above) will be continued.

- I can only see in my Telegram contacts, people who created an account on Telegram, connected with a phone number which is saved my phone contacts (and this number has been synchronised with the Telegram servers). Hence if one of my phone contacts created a Telegram account with another number than the number I have saved in my phone contacts, I won't be able to see this contact in my Telegram contacts. So concretely it means that, if I created a Telegram account with number B, and the person I'm having in my phone contacts (having my number A in its phone contacts) also created a Telegram account, I will see this contact in my Telegram contacts BUT the person will NOT see me in his Telegram contacts at all!

- The "last seen" status always remains visible (although only in terms of recently (1-3 days), week, month, long time ago), whatever setting you choose in the privacy settings. Only blocked contacts will always just see the "last seen a long time ago" status.

- If you set your profile photo (in privacy settings) to be visible only for "My Contacts", it concretely means that the contact must be somehow mutual. So what does mutual mean? For sure it means "if both are seeing each other" in their respective Telegram contacts list. Now there is probably also an additional scenario possible: I didn't test this but I assume, if there is a chat (even empty, as when it's automatically created), it's very likely considered as mutual too. To be concrete, if created my Telegram account with phone number B and my "friend" is having my phone number A (or none at all) saved in his phone contacts (while syncing with Telegram), I can see his pic by default. Now if he is later changing his privacy settings to 'My Contacts' only, I guess it will remain like that. To be very clear, I didn't test this so far, so it's just an assumption. (Feel free to correct me if my assumption is wrong.) Last but not least, there is a way to add exceptions in the privacy settings, but all this is not active by default.

Bottom line: I don't like (not to say I hate) the way Telegram is handling privacy. You need almost to be a rocket scientist, to understand all what is going on in the background (on their cloud servers and in their main offices in Dubai, United Arab Emirates). There's simply no transparency at all and no precise information given, especially prior becoming member of their fan club. You can (and your really should!!) got through all the possible settings hidden under "privacy and security". But even then, for most of us it will have been too late anyway!

You can of course (as I did) switch off the (future!) contact synchronisation. That being said, you have to weigh the pros and cons for yourself, about also deleting all the already automatically uploaded contacts. Be aware that "delete synced contacts" deletes all the Telegram contacts only, so your phone contacts (saved prior to install the app) will not be touched! If you just switch off the synchronisation, it will not change anything in the present moment, so understand well this important difference.

I hope this post was not too confusing and will help others. Feel free to comment or correct me, if something is wrong.
 
Actually, it appears to be a TL;DR.

Telegram is very simple to use and to understand.

When you create an account, you should set up the app before you give it permissions.

This goes for any app- not just Telegram.

If you allow Telegram to have access to your contacts, then when any ontacts stored on your device have a Telegram account you will be notified.

There is no chat automatically activated, unless you tap the notification.

Yes, the other person will also get a notification that you opened an account.
But only if that person's settings allow it, and your do too.

This is not rocket science.
 
Upvote 0
When you create an account, you should set up the app before you give it permissions.
Difficult to set up the app, before you install it. And once you open it for the first time, it immediately asks for access permissions. Only after this step you get a chance to go into the apps settings (privacy) and exactly set up what you need.

There is no chat automatically activated, unless you tap the notification.
I don't know what you mean by "activated" but it's a fact, that a chat is created in the app, on your side. And this behaviour can't be stopped so far.
 
Upvote 0
Difficult to set up the app, before you install it. And once you open it for the first time, it immediately asks for access permissions. Only after this step you get a chance to go into the apps settings (privacy) and exactly set up what you need.


I don't know what you mean by "activated" but it's a fact, that a chat is created in the app, on your side. And this behaviour can't be stopped so far.

I have been using Telegram for a long time, and it is very simple to download the app, install it, and then turn off internet access while you make setting adjustments.
As soon as you turn internet access back on, the settings are uploaded to the cloud.

The chat is only created on your side if you tap on the notification that you mentioned before.
This happens anytime that you tap n anyone's avatar.
If you don't send anything, the other party will never know anything.
 
Upvote 0
Yes, that's of course an option. But that shouldn't be this way IMO.


That's simply not true. (I just tested it again.)
Actually, it is true.
I have been using Telegram for years, and have none of the issues that you seem to have.

If it is such a bad app, then why do people that require secure communication use it all over the world?
 
Upvote 0

BEST TECH IN 2023

We've been tracking upcoming products and ranking the best tech since 2007. Thanks for trusting our opinion: we get rewarded through affiliate links that earn us a commission and we invite you to learn more about us.

Smartphones