Messaging push notifications are a privacy attack surface, says Durov
12.04.2026
13506
Pavel Durov, the co-founder of the Telegram messaging application, said that push notifications create a persistent, critical vulnerability to user privacy, allowing data retrieval even after messages and messaging applications that allow push notification data storage have been deleted from a device.
Messaging push notifications are a privacy attack surface, says Durov
Pavel Durov just dropped a truth bomb: your push notifications are a massive privacy backdoor. Even if you delete your messages and apps, those notification logs can still spill your secrets. This comes after reports that the FBI pulled deleted Signal messages straight from iPhone notification databases.
“Turning off notification previews won’t make you safe if you use those applications, because you never know whether the people you message have done the same.”
Durov cited a 404 Media report showing how the FBI accessed device notification logs to recover Signal messages. Cointelegraph reached out to Signal but got radio silence. This exposes how end-to-end encryption can be bypassed through metadata and app-generated data—making decentralized messaging that doesn't collect this info more crucial than ever.
Alternative messaging application use surges amid spikes in civil unrest and geopolitical turmoil
Decentralized messaging and social platforms have seen a 145% spike in search interest over the past five years. When governments crack down, people turn to tools that can't be controlled.
Bitchat—a decentralized P2P messaging app using Bluetooth mesh networks—got downloaded by 48,000+ users in Nepal during a social media blackout. People are also using VPNs to bypass national firewalls and bans on privacy apps.
Durov pointed out that government bans on Telegram have backfired spectacularly. Instead of pushing people to state-controlled surveillance apps, bans have driven mass VPN adoption. Over 50 million users in Iran have downloaded Telegram despite years of government prohibition.
#Push Notifications#Privacy#Data Privacy#Messengers#End-to-End Encryption
Got a topic? Write to ATLA WIRE on Telegram:t.me/atla_community
