Account creation is simple and privacy-respecting (phone number only, with optional profile details). Users can self-terminate anytime by uninstalling. However, Signal reserves the right to suspend or terminate accounts 'anytime for any reason' without notice, explanation, opportunity to cure, or appeal process. No data export options are mentioned. The broad termination clause without procedural safeguards is a significant consumer protection gap.
Signal preserves court access in the US (no mandatory arbitration). Disputes are resolved in the US District Court for the Northern District of California or California state courts in San Mateo County. California law governs. Notably, there is no class action waiver and no jury trial waiver, which are strong consumer protections. The exclusive venue is limited to California, which may be inconvenient for non-California users, but is reasonable for a US-based company. International users have no local forum option, which is a limitation. Small claims are likely preserved (though not explicitly stated) as a matter of US law.
No indemnification clause is present in Signal's terms. Signal does not demand that users indemnify, defend, or hold harmless Signal or its affiliates against third-party claims. This absence is favorable to consumers and is not a consumer protection gap. The lack of a one-way indemnity clause is a positive indicator of consumer-friendly terms. Low confidence reflects the category not being explicitly addressed.
Signal reserves the right to update terms at any time and will update the 'Last Modified' date. Changes are accepted through 'continued use of our Services' without requiring affirmative re-acceptance. No advance email notice or opt-out window is mentioned. This 'continued use constitutes acceptance' mechanism without accompanying advance notice is the pattern condemned in Harris v. Blockbuster. No archive of prior versions is mentioned. Consumers cannot easily reject specific changes; the only remedy is to stop using the service.
Signal provides clear acceptance through installation or use. Age requirement (13+) is explicit and complies with COPPA. Service scope is well-defined (private messaging, calling, related services). Language is plain and understandable. Acceptance mechanism is straightforward, though explicit clickwrap is not mentioned.
Signal explicitly confirms that users own the information they submit. Signal does not claim ownership of user-generated content or messages. Signal retains only its own IP rights (copyrights, trademarks, patents in the Service itself). End-to-end encryption and server-side message queuing ensure user content is never accessed or modified by Signal. No mention of Signal using user content for training, advertising, or monetization. This is consumer-friendly IP treatment.
Signal provides broad disclaimers in all-caps, stating services are provided 'AS IS' without warranties. Liability is capped at $100 total, which is reasonable for a free service. Signal disclaims liability for lost profits, consequential damages, and third-party actions. The disclaimers are conspicuous and clear, and Signal acknowledges that some jurisdictions may not permit such limitations. For a free service, the $100 cap is more reasonable than for paid services, though the breadth of the disclaimers is extensive.
Signal's privacy practices are exceptionally strong for a messaging platform. The company does not sell, rent, or monetize personal data. Messages and calls are always end-to-end encrypted and inaccessible to Signal. Account information (profile name, picture) is also encrypted. Data collection is minimized to technical metadata required for service operation. Contact discovery uses privacy-preserving hashing. Data sharing occurs only for legal compliance, fraud prevention, and security. However, metadata (authentication tokens, push tokens) is collected and stored, and international data transfers to the US are mentioned. The privacy policy is dated 2018 and has not been visibly updated.