Signal’s president reveals the cost of running the privacy-preserving platform—not just to drum up donations, but to call out the for-profit surveillance business models it competes against.
Signal’s president reveals the cost of running the privacy-preserving platform—not just to drum up donations, but to call out the for-profit surveillance business models it competes against.
The encrypted messaging and calling app Signal has become a one-of-a-kind phenomenon in the tech world: It has grown from the preferred encrypted messenger for the paranoid privacy elite into a legitimately mainstream service with hundreds of millions of installs worldwide. And it has done this entirely as a nonprofit effort, with no venture capital or monetization model, all while holding its own against the best-funded Silicon Valley competitors in the world, like WhatsApp, Facebook Messenger, Gmail, and iMessage.
Today, Signal is revealing something about what it takes to pull that off—and it’s not cheap. For the first time, the Signal Foundation that runs the app has published a full breakdown of Signal’s operating costs: around $40 million this year, projected to hit $50 million by 2025.
Signal’s president, Meredith Whittaker, says her decision to publish the detailed cost numbers in a blog post for the first time—going well beyond the IRS disclosures legally required of nonprofits—was more than just as a frank appeal for year-end donations. By revealing the price of operating a modern communications service, she says, she wanted to call attention to how competitors pay these same expenses: either by profiting directly from monetizing users’ data or, she argues, by locking users into networks that very often operate with that same corporate surveillance business model.
“By being honest about these costs ourselves, we believe that helps provide a view of the engine of the tech industry, the surveillance business model, that is not always apparent to people,” Whittaker tells WIRED. Running a service like Signal—or WhatsApp or Gmail or Telegram—is, she says, “surprisingly expensive. You may not know that, and there’s a good reason you don’t know that, and it’s because it’s not something that companies who pay those expenses via surveillance want you to know.”
Signal pays $14 million a year in infrastructure costs, for instance, including the price of servers, bandwidth, and storage. It uses about 20 petabytes per year of bandwidth, or 20 million gigabytes, to enable voice and video calling alone, which comes to $1.7 million a year. The biggest chunk of those infrastructure costs, fully $6 million annually, goes to telecom firms to pay for the SMS text messages Signal uses to send registration codes to verify new Signal accounts’ phone numbers. That cost has gone up, Signal says, as telecom firms charge more for those text messages in an effort to offset the shrinking use of SMS in favor of cheaper services like Signal and WhatsApp worldwide.
Another $19 million a year or so out of Signal’s budget pays for its staff. Signal now employs about 50 people, a far larger team than a few years ago. In 2016, Signal had just three full-time employees working in a single room in a coworking space in San Francisco. “People didn’t take vacations,” Whittaker says. “People didn’t get on planes because they didn’t want to be offline if there was an outage or something.” While that skeleton-crew era is over—Whittaker says it wasn’t sustainable for those few overworked staffers—she argues that a team of 50 people is still a tiny number compared to services with similar-sized user bases, which often have thousands of employees.
There’s something kind of funny about one of the largest expenses being SMS and voice calls to verify phone numbers when one of the largest complaints about signal is the phone number requirement. I wonder how much this cost factors into them considering dropping the phone number requirement.
And now folks predictably are bitching about ceo comp. 400k is shit for a competent CTO. I make nearly as much for a lowleey director for a small federal contractor. Welcome to tech pay.
I saw a lot of discussion in the comments about their workers pay, but honestly, they make a great product. Wouldn't wanna be counting pennies in someone elses pockets. I donated a one time 25 bucks, I hope they will continue to ask for donations whenever they are in dire need of server running money.
I suspect if they run short of money to run it, they'd add some Discord style features. Better quality voice and video sounds like an easy one to get users of it to pony up for.
Although again, I'd prefer a federated alternative. We shouldn't be hanging large portions of infrastructure on a handful of companies that at any point can pull the rug.
My non-pro question is : if it was a peer-to-peer service like element, using a decentralized protocol like matrix, wouldn't it be a huge cost saver because of less data bandwidth and server costs?
Now I want to know more about that $6 million annually spent on SMS messages... That seems like a ridiculously unnecessary cost, wonder if some startup can wedge into the market and undercut the competition.
I've been using signal since forever. Recently when there was a big exodus from Whatsapp because of their changed data policies was the first time I felt an impact with response time in the app etc. I immediately set up a regular donation. A few months later they came out with there cryptocurrency scheme I decided I won't be funding any cryptocurrency so I cancelled my donations. I trust signal on the technical side implicitly. But they have lost my trust in the business side :/
Eventually they're going to cave into having some paid model. Like all good things we once held dear, the long arm of monetary reliance shows no pity or remorse in it's wake.
Made significantly harder by removing easy ways to donate. Instead I have to add my credit card to their application or log in to PayPal instead of just using Google's Play Store. I use to donate until they removed that option. Now every time I wanted to donate and run into that dialog am just like, yeah I don't have PayPal's password on hand and am not leaving my CC with them. I'll do it later, only to forget.
Can we really call a business nonprofit if they pay their CEO 5.7 million a year? Over 10% of operating costs going to one employee? That's fucking insane
Signal was launched by now-defunct Open Whisper Systems (OWS) in 2013, brainchild of shadowy tech guru ‘Moxie Marlinspike’ – real name Matthew Rosenfeld. In February 2018, responsibility for managing the app passed to the nonprofit Signal Foundation, launched with $50 million in startup capital provided by billionaire former Facebook higher-up Brian Acton, the Foundation’s executive chair
Huawei engineer exposed SIGNAL has CIA backdoor --- Please do not use SIGNAL has been subverted *
WikiLeaks Says the CIA Can “Bypass” Secure Messaging Apps Like Signal. What Does That Mean? *
The fast-growing encrypted messaging app is making itself increasingly vulnerable to abuse. Current and former employees are sounding the alarm *
I know what the counter arguments are all gonna be, I live and breate security. The fact is much of this is outside our inspection. We cannot audit the internal Signal network or it's code. If something comes across as possibly sketchy when deaing with security and privacy, for all intents and purposes it is sketchy and cannot be trusted.
When in doubt, personalize the situation. You have a babysitter. You heard sketchy things and saw some low grade sketchy stuff. What do you do? You boot immediately, right?
Do not try to convince yourself of something you cannot without hard evidence.
I can't help but read it as a future excuse to seek investors that will inevitably lead to selling Signal and of course starting the cycle all over with another "new" company. Hope I'm wrong but I guess we'll see if it will go down the same route as WhatsApp.
Session, a fork of Signal, is better because as far as privacy goes as you don't have to download it from a store that violates your privacy. Just go to the offcial site and download the apk.