Jan Koum incorporated WhatsApp Inc. on February 24, 2009, creating a company focused on mobile communication. The app’s early concept centered on sharing simple status updates, which soon evolved into real-time messaging.
In May 2009, WhatsApp launched on Apple’s App Store, bringing internet-based messaging to smartphones. Its growth helped popularize the idea that messaging could work across phone carriers and countries using mobile data instead of SMS.
On February 19, 2014, Facebook announced an agreement to acquire WhatsApp. The deal signaled that private messaging had become a central part of social communication—and raised new questions about how WhatsApp would handle privacy under a large advertising company.
On October 6, 2014, Facebook closed the acquisition and became the legal owner of WhatsApp. WhatsApp continued operating as a separate brand, but the ownership change shaped later debates about data sharing and monetization.
On November 18, 2014, Open Whisper Systems announced a partnership with WhatsApp to bring end-to-end encryption using the Signal Protocol. End-to-end encryption means only the sender and receiver can read message content, not the service provider in the middle.
In 2015, WhatsApp expanded beyond text by introducing Voice Calling, letting users place internet-based calls inside the app. This change made WhatsApp more like an all-in-one communications service and increased the amount of sensitive communication happening on the platform.
On April 5, 2016, WhatsApp and Open Whisper Systems announced the completion of end-to-end encryption across WhatsApp’s communications. The rollout made encryption the default for messages and calls, positioning WhatsApp as one of the largest encrypted messaging platforms in the world.
In August 2016, WhatsApp updated its terms and privacy policy to allow sharing certain account information (such as phone number and usage data) with Facebook. Existing users were given a limited window to opt out of some data sharing, fueling debate about how encryption protects content but not necessarily “metadata” (data about usage).
On February 10, 2017, WhatsApp rolled out two-step verification (an optional six-digit PIN) to help prevent account takeovers. This feature addressed a common weakness of phone-number-based accounts: attackers who gain access to number verification can hijack an identity.
On February 20, 2017, WhatsApp introduced a new Status feature for sharing photos and videos that disappear after 24 hours. This moved WhatsApp further into social media-style broadcasting and created new potential surfaces for business promotion and future monetization debates.
On January 18, 2018, WhatsApp launched the WhatsApp Business app in select markets, offering business profiles and messaging tools for small companies. This marked a major shift toward revenue-generating use cases—support, notifications, and customer messaging—without changing the basic consumer chat experience.
In early January 2021, WhatsApp began prompting users to accept updated terms tied to how people message businesses and how data may be shared with Facebook’s family of companies. The notifications caused widespread confusion and criticism, with many users worried the change affected personal message privacy despite end-to-end encryption remaining in place for message content.
On January 15, 2021, WhatsApp said it would delay enforcement of the updated privacy terms until May 15, 2021, after user backlash and public scrutiny. The delay showed how business-focused features and policy language could create trust shocks even when encryption protects message content.
May 15, 2021 became the key reference point for WhatsApp’s privacy-policy controversy, even as WhatsApp emphasized that personal chats are end-to-end encrypted. By this stage, WhatsApp’s story had a clear tension: strong encryption for message content alongside expanding business tools and ongoing disputes over data sharing and transparency.
WhatsApp encryption, business features, and policy controversies (2009–2021)