01 March 2025

Instant Messaging Delivery Receipt and Possible Privacy Issue

Several instant messaging services, such as WhatsApp, provide message delivery reports to senders. While delivery reports offer a useful confirmation that a message has reached its intended recipient's device, they can also present privacy concerns. 

My investigation into this issue began after a contact accurately deduced on multiple occasions that I was keeping my phone switched off during the afternoons. This detection surprised me. They later explained that they observed WhatsApp messages sent to me in the afternoon remained undelivered, and were consistently delivered after 6 am.

According to WhatsApp's help documentation a "delivery report" signifies that—
The message was successfully delivered to the recipient's phone or any of their linked devices.

Given that internet connectivity is required for message delivery, a user's decision to remain disconnected for personal reasons or digital well-being should remain private. However, the current delivery report system inadvertently often reveals a user's online connectivity status, including the precise time they regained internet access (i.e. the time when the message was delivered).

While services like WhatsApp offers to disable read receipts in settings, there appears to be no corresponding option to disable delivery reports. I have consulted available resources and help articles, conducted various tests, and inquired with AI models such as Meta AI and Gemini. The consensus is that users currently lack control over delivery reports.

Test screenshots

WhatsApp screenshot
Test message sent to a contact.
The message was sent at 7:43 am. Most possibly they regained internet access around 9:30 am 

WhatsApp screeshot
Another test message.
The message was delivered in a few minutes after sending.

WhatsApp screenshot
Message sent to Meta AI bot on WhatsApp.
The bot is always online, so both delivery and reading were instant

Solutions

Just as we expect letters to be placed in the letterbox and couriers at the doorstep, respecting the privacy of personal space, a message delivery report revealing precise internet connectivity times might like an unwelcome overreach.

A potential solution would be to implement "sent reports" in place of "delivery reports." This approach, similar to that used by email services, would provide confirmation of message transmission and notification of bounce-backs, without disclosing the recipient's device arrival or internet connectivity status (and timing).

Alternatively, users could be provided with a toggle to disable "delivery reports" within settings, analogous to the existing "read receipts" functionality. .

A third potential solution would be to eliminate the "delivery to device report" feature entirely. 

Finally we hope that our observations and suggestions contribute to enhanced user privacy and a more positive instant messaging experience.

No comments:

Post a Comment

Join the conversation. Please keep it friendly and constructive by following our Comment Policy.