WhatsApp business chats may not be private
Developers flagged that some WhatsApp business conversations can be processed outside end-to-end encryption for tasks like message processing, AI features, or compliance reporting. (x.com) The same thread noted two integration approaches for businesses — a lightweight path and an official Meta Business API that requires verification — which affect how messages are routed and handled. (x.com)
Some WhatsApp chats with businesses can leave WhatsApp’s end-to-end encrypted path once a company plugs the conversation into Meta-hosted or partner tools. (faq.whatsapp.com) WhatsApp’s help page says users may see different labels in a business chat: one says, “This business uses a secure service from Meta to manage this chat,” while another says messages and calls are end-to-end encrypted when the business is using the WhatsApp Business app or storing messages itself. (faq.whatsapp.com) The distinction tracks how a company connects to WhatsApp. Meta’s developer documentation describes the WhatsApp Business Platform, formerly called the WhatsApp Business Application Programming Interface, as a separate product from the small-business WhatsApp Business app. (twilio.com) Meta also documents “Cloud Application Programming Interface solutions for WhatsApp Business App users,” where a business can keep using the app while a partner platform sends and receives one-to-one messages through Cloud Application Programming Interface infrastructure. (developers.facebook.com) That setup matters because the business side of the chat may now run through dashboards, customer-service software, automation tools, or bots instead of only the phone app. Twilio says businesses can use the platform for notifications, two-way conversations, and chatbots, and Meta documents separate endpoints for conversational automation. (twilio.com) (developers.facebook.com) Meta’s current documentation also shows a newer partner model called Multi-Partner Solutions. One endpoint lists the solutions attached to a WhatsApp Business Account, and another issues a scoped access token for a customer business that has shared its account with that solution. (developers.facebook.com 1) (developers.facebook.com 2) For users, the practical point is that “encrypted on WhatsApp” does not mean “only the person on the other end can read it” once a business adds outside systems. WhatsApp’s own business-chat guidance says the business may be managing the conversation with Meta’s secure service or other storage and handling tools. (faq.whatsapp.com) Businesses still face platform rules. Twilio’s WhatsApp documentation says companies must collect explicit user opt-ins before sending messages and must honor opt-out requests or risk account penalties. (twilio.com) Meta did not invent this split this week; the documentation has described separate business products and routing options for some time. What changed is that developers drew fresh attention to the labels and the plumbing behind them, putting a finer point on which “WhatsApp business” chats stay inside the app and which ones are handled by a broader business stack. (developers.facebook.com) (twilio.com)
