About Signal's privacy policy
About Signal's privacy policy
"Third Parties. We work with third parties to provide some of our Services. For example, our Third-Party Providers send a verification code to your phone number when you register for our Services. These providers are bound by their Privacy Policies to safeguard that information. If you use other Third-Party Services like YouTube, Spotify, Giphy, etc. in connection with our Services, their Terms and Privacy Policies govern your use of those services."
We work with third parties to provide some of our Services.
What type of Services? And do Signal use our contacts or something private like that for third-parties?
It does offer an example of the services they use third parties to provide in the next sentence. So they're obviously giving out the phone number you provided at sign-up to the verification code people. I don't think there's any reason to believe they're giving away your contact list from this paragraph anyway.
It has end-to-end encryption for messages and its clear. But, I haven't looked at their source code yet and don't know which types data they send. Not only contacts, maybe more spesific things that is not encrypted. Just wanted to know it. But its exact that they give our numbers for verification. Thanks for comment. Goodbye.
The SMS based pone number verification is one. Another one is google for reCaptcha used to create a signal account. There is also some google dependency for the face blurring. There may be more.
Thanks for reply! I have a Samsung phone that De-Googled %100~ (exclude some important Android depencies based on Google). I restored GMS for auth in Signal. After the auth, I uninstalled it back. There is no Youtube, no Google - Chrome, no Spotify etc. Just FOSSed and de-Googled phone. Do I still using Google Services indirect ways because of Signal? Is it possible to be another third-party sharing except phone verification?
To be honest, I'm not sure. Signal does not have an official f-droid build. They distribute an APK on their website for degoogled devices which allows for websockets to be used as the google notifications systems is not used on degoogled devices, but I'm unsure what it means for the rest of the dependency. Some dependencies can be shipped with the apk so do not require google services to be installed, but an expert should probably shime in to shed some light in this situation specifically.
Third-party service: CIA