WhatsApp is launching a new feature called Incognito Chat, designed to let users converse with Meta’s AI assistant without the company being able to read the messages. Built on WhatsApp’s existing “Private Processing” infrastructure, this tool aims to resolve a major tension in the tech world: how to use powerful, cloud-based AI models while maintaining strict end-to-end encryption standards.
The feature addresses a growing privacy concern. Most current AI chatbots require companies to process and store user queries to improve their models or for advertising purposes. Incognito Chat changes this dynamic by ensuring that Meta itself cannot access the questions asked or the answers generated.
How Private Processing Works
The core technology behind Incognito Chat is Private Processing, a system WhatsApp introduced last year for features like message summarization. Here is how it protects user data:
- Trusted Execution Environment (TEE): The AI inference runs inside a secure, isolated area of Meta’s servers.
- No Data Access: While Meta knows that a user accessed the feature, the actual content of the conversation remains encrypted and inaccessible to Meta’s employees or systems.
- Ephemeral by Default: Conversations are deleted immediately once the session ends. Unlike other AI platforms that may store logs for months, Incognito Chat leaves no trace on the servers after you close the chat.
“Incognito Chat handles all AI inference in a Trusted Execution Environment that ensures your messages are not accessible to us,” Meta CEO Mark Zuckerberg stated. “This is different from other disappearing AI products where your conversations logs often remain on other companies’ servers for many months.”
Why This Matters: The Privacy vs. Power Trade-off
For years, the ideal for privacy has been running AI locally on a device. However, current large language models require massive computing power that smartphones cannot yet provide. Users are forced to choose between powerful AI (which requires sending data to the cloud) and privacy (which requires keeping data local).
WhatsApp head Will Cathcart explained the challenge: “With AI, from a privacy standpoint, you’d want to run everything on your own phone, but the benefit of these models is using larger and larger compute to make them work. So the challenge is how do you build something in a data center that’s not going to fit in your pocket but has the same types of security properties.”
Incognito Chat attempts to bridge this gap by creating a “giant phone” in the data center—a secure environment that mimics the privacy of a local device.
Additional Features and Limitations
Alongside Incognito Chat, WhatsApp announced Side Chat with Meta AI. This feature allows users to DM the AI assistant about an ongoing conversation with friends or family. For example, if a group is discussing restaurant options, a user can ask the AI for suggestions without sharing the entire group chat history with the AI provider.
- Text-Only for Now: Incognito Chat currently supports text only. Image processing and voice recognition are in development.
- Anonymized Web Search: By default, the AI can search the web for real-time information. This search is anonymized, though users can disable this feature entirely.
- Future History Options: WhatsApp may introduce options to retain conversation history within the secure Private Processing environment for users who want it.
Expert Verification and Caveats
Meta has invited third-party audits to verify the integrity of Private Processing. Matt Green, a cryptographer at Johns Hopkins University who consulted on the project, expressed confidence in the system.
“I have confidence that if you want to talk to an AI without anyone else seeing your conversation, including Meta, this will do the job,” Green said.
However, experts note that cloud-based security always involves trade-offs. A centralized, highly secure system becomes a valuable target for attackers. If the secure environment is breached, the stakes are high given the potential for deeply personal information to be shared. Furthermore, users must still trust Meta’s implementation of the security measures, similar to how they trust the platform for standard messaging.
Context: Meta’s Mixed Privacy Record
The launch of Incognito Chat comes at a complex time for Meta’s privacy reputation. While Zuckerberg claims pride in delivering “private AI,” the company recently faced backlash for removing opt-in end-to-end encryption from Instagram Direct Messages, reversing previous promises to roll out default encryption across its platforms.
This contrast raises questions about Meta’s long-term commitment to privacy versus its commercial interests. While Incognito Chat represents a significant technical step forward for user privacy in AI, it exists alongside a broader corporate strategy that continues to prioritize data collection in other areas.
In summary, WhatsApp’s Incognito Chat offers a rare opportunity for billions of users to interact with advanced AI without sacrificing message privacy. It demonstrates that powerful cloud computing and strict encryption can coexist, though it also highlights the ongoing tension between tech giants’ privacy claims and their broader business practices.
