The policy discloses that businesses using WhatsApp may grant third-party service providers, including Meta, the ability to send, store, read, manage, or otherwise process communications that users send to those businesses. The policy directs users to consult the individual business's privacy policy for details on how their messages are handled.
This analysis describes what WhatsApp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that end-to-end encryption protections do not apply in the same manner to communications sent to businesses that have authorized third-party service providers to access those messages. Users communicating with businesses on WhatsApp may not have visibility into which service providers have been granted access to their messages without reviewing each business's separate privacy policy.
The updated policy removes an unconditional statement of intent and replaces it with conditional language: 'We have no intention to introduce them, but if we ever do, we will update this Privacy Policy.' This revision reserves WhatsApp's right to introduce ad formats in Status and Channels in the future, subject only to updating the privacy policy at that time. The prior language established a stronger commitment; the updated language is more permissive. No specific consumer action is required; the change is informational regarding WhatsApp's future flexibility on advertising formats.
View change record →The updated terms no longer state that WhatsApp has no intention to introduce ads in Status and Channels. Instead, the revised language indicates that if ads are introduced in these features, WhatsApp will update its privacy policy to reflect the change. This means the company has reserved the option to add ads to Status and Channels in the future, subject to policy update notification.
View change record →This new provision explicitly permits Meta and third-party service providers to access, read, and process business messages on WhatsApp, significantly expanding data access beyond WhatsApp's direct control.
View full change record →Under this clause, communications sent to businesses on WhatsApp may be stored, read, and processed by third-party service providers selected by those businesses, which may include Meta. The agreement directs users to review the individual business's privacy policy to understand how their information is handled in these contexts.
Cross-platform context
See how other platforms handle Business Message Access by Third Parties Including Meta and similar clauses.
Compare across platforms →"In addition, some businesses might be working with third-party service providers (which may include Meta) to help manage their communications with their customers. For example, a business may give such third-party service provider access to its communications to send, store, read, manage, or otherwise process them for the business. To understand how a business processes your information, including how it might share your information with third parties or Meta, you should review that business' privacy policy or contact the business directly.Excerpt from WhatsApp's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision implicates GDPR Articles 13 and 28, which require transparency about third-party data processors and mandate data processing agreements between controllers and processors.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that end-to-end encryption protections do not apply in the same manner to communications sent to businesses that have authorized third-party service providers to access those messages. Users communicating with businesses on WhatsApp may not have visibility into which service providers have been granted access to their messages without reviewing each business's separate privacy policy.
Under this clause, communications sent to businesses on WhatsApp may be stored, read, and processed by third-party service providers selected by those businesses, which may include Meta. The agreement directs users to review the individual business's privacy policy to understand how their information is handled in these contexts.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by WhatsApp.