Apple App Store apps high jurisdiction riskMessaging and payments super-app · Score 69/100 · Last checked 2026-10-22
Mainland China users are on Weixin under a separate policy. Assume the operator can read messages: WeChat is not end-to-end encrypted.
Built from: public records, checked 2026-10-22.
Score breakdown
Who owns it
Parent based in: 🇨🇳 China
Laws that can apply: PIPL, National Intelligence Law, Data Security Law
Where your data can go
| Who | Country | Why they are involved |
|---|---|---|
| Tencent (own servers) | 🇸🇬 Singapore | Stores data in Singapore and Malaysia (Hong Kong for Hong Kong and Macao users) |
| Adyen | 🇳🇱 Netherlands (EU) | Payment card processing |
| MessageBird | 🇳🇱 Netherlands (EU) | SMS delivery |
| Twilio | 🇺🇸 United States | SMS delivery |
Jurisdictions touched: 🇨🇳 China · 🇸🇬 Singapore · 🇳🇱 Netherlands (EU) · 🇺🇸 United States
What the public record says
In May 2020 Citizen Lab reported that files sent by non-China accounts were hashed and used to censor China-registered accounts, and that this was not clearly disclosed. Source
A June 2023 report said Mini Program and Channels usage is collected by WeChat itself, with no reasonable opt-out of analytics. Source
An October 2024 analysis found MMTLS is a modified TLS 1.3 with weakened parts. It did not break it, and it is not end-to-end encryption. Source
Sources
- WeChat privacy policy
- App Store listing (seller: Tencent Technology (Shenzhen))
- Tencent (listing: secondary source)
Ownership, locations and data partners come from the company's own pages and filings where they exist. Last checked 2026-10-22.