Signal vs Telegram vs Threema: Best App by Threat Model

Updated July 17, 2026

Telegram's Data-Sharing Surge Reveals a Critical Privacy Tradeoff

Telegram now clears 1 billion monthly active users. Its privacy guarantees have not kept pace. After CEO Pavel Durov's arrest in France in August 2024, Telegram rewrote its privacy policy to widen how much data it shares with law enforcement. The numbers moved fast: U.S. requests for user data climbed from 14 requests covering 108 users in January–September to more than 900 requests by year-end, exposing 2,253 users' data to U.S. authorities (CyberInsider, Bleeping Computer).

Recommended: NordVPN — Protect your data with encrypted browsing

That's a real problem for an activist organizing under a repressive regime — and for an everyday user swapping financial plans or health details in an ordinary chat. Telegram's revised policy now lets it hand over IP addresses and phone numbers for "a broad range of crimes," not just terrorism (HelpNetSecurity). It's a retreat from the old stance of cooperating only on serious crimes. Scale arrived, and default confidentiality left with it.

So which app should you actually use? That depends entirely on who you're trying to keep out.

Key Takeaways

• Signal and Threema encrypt everything by default; Telegram only encrypts opt-in one-on-one "Secret Chats."
• Threema needs no phone number, which makes it the strongest choice against stalkers and anyone who might tie your identity to a number.
• Threema's servers sit in Switzerland, outside the Five Eyes intelligence-sharing alliance — a meaningful edge against nation-state surveillance.
• Pick your app by threat model, not popularity. The right tool for a warrant isn't the right tool for a border crossing.

---

Encryption Standards: Default vs. Opt-In Protection

Signal and Threema end-to-end encrypt (E2E) all communications by default — only the sender and recipient hold the keys, and no server in between can read the message. Telegram's encryption is optional and narrower.

Signal runs on the open-source Signal Protocol, the same one WhatsApp and Google Messages adopted. Every message, call, and group chat is encrypted, and the Signal Foundation is blunt: no one — not Signal, not governments, not hackers — can read your messages. Telegram encrypts only "Secret Chats" end-to-end, and those are one-on-one. Group chats stay client-server encrypted, so Telegram's servers can see them. Cryptographer Matthew Green of Johns Hopkins has argued Telegram isn't really an encrypted messaging app at all, since its defaults leave your chats readable on Telegram's servers ((https://blog.cryptographyengineering.com/)). Threema encrypts everything by default, keeps almost no metadata, and hosts its servers in Switzerland.

Here's the side-by-side that actually matters for a threat-model decision:

Dimension	Signal	Telegram	Threema
Encryption default	On, all chats	Off (opt-in Secret Chats)	On, all chats
Metadata retained	Minimal	Extensive (cloud chats)	Near-zero
Server jurisdiction	United States	UAE / distributed	Switzerland
Identifier required	Phone number	Phone number	Random 8-char ID

The gap is stark. Discuss something sensitive in a Telegram cloud chat and it's exposed to server-side access unless you remember to switch to a Secret Chat. On Signal or Threema, you don't have to remember anything.

---

Privacy Policies Under Scrutiny: Nonprofits vs. For-Profits

Who owns an app tells you a lot about whose incentives it serves. Signal runs as a nonprofit with roughly $50 million in annual operating costs, funded by donations and an interest-free loan from WhatsApp co-founder Brian Acton. About $14 million of that is infrastructure — including $7 million for SMS verification, the price of tying accounts to phone numbers, and $1.3 million for encrypted file storage (Signal Foundation, Wikipedia).

Telegram is a for-profit company that says it turned profitable in 2024, earning through Telegram Premium (about $4.99/month) plus advertising, with revenue it claims topped $1 billion (Telegram). That profit motive sits in obvious tension with its 2024 data-sharing shift.

Threema charges a €3.99 one-time fee for the consumer app and €3–5 per user per month for enterprise plans. No recurring consumer cost makes the price predictable, though Swiss hosting and a privacy-first design keep adoption niche.

None of the three is a bad actor, but the trade-offs differ. Signal's donation model means no incentive to monetize you, at the cost of long-term funding questions. Telegram's profitability buys stability but rewards data cooperation. Threema sells the app outright, so you're the customer, not the product — but your contacts have to be willing to join you.

---

User Accessibility vs. Security: Phone Numbers, Usernames, and Anonymity

Signal's 70–100 million monthly users register with a phone number, though usernames (launched February 2024) let you hide that number from contacts. A username runs 3–32 characters and must end in two or more digits (Signal blog, The Hacker News).

Telegram's billion-plus users also register by phone. Engagement is high — 21 daily opens and 41 minutes of use per user (TechCrunch) — but that stickiness rides on default cloud storage, which retains message history and metadata you can't fully claw back.

Threema takes a different path: a randomly generated 8-character ID (for example, 3X7K9L2M), with no phone number or email required. That's real anonymity, though it costs you discoverability — you share your ID by hand instead of syncing contacts automatically.

The practical upshot is situational. Someone facing a civil lawsuit might want Threema's ID system, so nothing links their number to a sensitive thread. A family coordinating logistics might pick Signal for default encryption and accept that phone-number contact sync leaks some metadata.

---

Financial Sustainability and Infrastructure Costs

This is the least urgent factor for a threat-model buyer, but it's worth a glance — an app that can't fund itself can't protect you for long. Signal's ~$50 million annual cost, including $1.3 million just for encrypted file storage, leans on donations and Acton's loan. That model could strain in a downturn.

Telegram's 2024 numbers — over $1 billion in reported revenue and roughly $547 million in profit ((https://techcrunch.com/)) — remove that worry. But a for-profit that earns while complying with a widening set of data requests isn't optimizing for your privacy.

Threema's revenue is modest by comparison. At €3.99 across roughly one million buyers, that's about €4 million in one-time sales — a rounding error next to Signal's budget or Telegram's profit, and it caps how fast Threema can scale servers. For most users that's fine: a lean, paid app with no growth-at-all-costs pressure is arguably the healthiest incentive of the three. Just don't expect Telegram's polish or reach.

---

Choosing the Right App: Mapping Threat Models to Features

1. Abusive Ex or Stalker

Go with Threema. The decisive feature is that it needs no phone number, so there's nothing for an ex to look up, spoof, or subpoena through a friend. Swiss jurisdiction is a footnote here — a stalker isn't law enforcement, so what protects you is the missing identifier, not the server's country. Turn on Registration Lock so no one can hijack account recovery.

2. Local Police with a Warrant

Signal is the pick. Default encryption and a thin metadata footprint mean there's little for a warrant to pull from the server — Signal has repeatedly shown that all it can produce is an account's creation date and last connection. Use a username to keep your number private, and set Disappearing Messages on sensitive threads so old history simply isn't there.

3. Employer Monitoring via Mobile Device Management (MDM)

Threema again. Mobile device management (MDM) is the software companies install to control and inspect work phones. Threema keeps no cloud backup unless you enable it, and no phone number ties the app to your employment records. Disable every backup, and ideally keep private conversations on a personal device your employer doesn't manage.

4. Nation-State Surveillance

Threema holds up best. Its Swiss hosting sits outside the Five Eyes alliance — the United States, United Kingdom, Canada, Australia, and New Zealand intelligence-sharing pact — which complicates cross-border data demands. Pair that with its near-zero metadata design, stick to encrypted file transfers, and avoid linking anything that identifies you.

5. Border/Customs Search

Signal, with clear eyes about what it can and can't do. At a border, no app is a shield — agents can compel you to unlock the device. Signal's real edge is Disappearing Messages plus no cloud backup, so there's less history to surface if you're searched. Recognition cuts the other way, so don't count on the app going unnoticed. Skip cloud backups and use a username to keep personal details off the screen.

---

Found an error? At Canopy Press, accuracy comes first. If you spot a claim that needs checking, let us know at [email protected] — we'll verify and correct it immediately.

Sources

• Signal Foundation — signal.org
• Threema pricing and ID system — threema.com
• CyberInsider and Bleeping Computer — Telegram 2024 data-sharing figures
• HelpNetSecurity — Telegram privacy policy revision
• Cryptography Engineering (Matthew Green, Johns Hopkins) — Telegram encryption analysis
• TechCrunch — Telegram usage and 2024 financials
• The Hacker News — Signal usernames launch

---

Some links are affiliate links — we may earn a commission if you sign up through them, at no extra cost to you. We only recommend products we've actually evaluated. See our editorial standards for more.

Found an error? At Canopy Press, accuracy comes first. If you spot a claim that needs checking, let us know at [email protected] — we'll verify and correct it immediately.

---