Skip to main content
For families who want their stories to last. learn about the founding circle.

Culture · Essay

Five social platforms that take privacy seriously

Signal, Mastodon, MeWe, Diaspora and Session, compared on the only question that matters: what does each one actually protect, and what does it ask of you in return? Plus the option nobody lists, which is not joining another network at all.

Written to last.

By Confinity Editorial · 2026-04-23 · 6-minute read
Quiet tools, kept out of the way.
The mainstream platforms are free because you are not the customer. Attention is sold to advertisers, and the data that targets the advertising is collected from everything you do. That is the deal, it has always been the deal, and the periodic leaks and scandals are not malfunctions of the system but glimpses of it. The alternatives below make a different deal. Each funds itself some other way, and each therefore asks something else of you instead: a subscription, some patience with rough edges, or the effort of choosing a server. There is no free lunch anywhere in this list, and the honest comparison is about which price suits you.
A laptop secured with a chain and a fingerprint padlock
Signal is a messaging app rather than a feed, and it belongs at the top of any privacy list because it is the one with the strongest guarantees and the least to configure. Everything is end-to-end encrypted by default: messages, calls, group chats. The Signal protocol is the reference design that other encrypted messengers borrow, and the organisation behind it is a nonprofit foundation, which removes the usual commercial reason to weaken things later. Security researchers recommend it with a consistency that almost nothing else in consumer software gets. What it asks of you: a phone number to register, and the acceptance that it replaces your group chats rather than your feed. There are stories, but there is no timeline and no discovery. That is most of why it is trustworthy. Mastodon is what a public feed looks like without a company in the middle. It is open-source and federated: thousands of independently run servers, each with its own rules and moderators, connected so that anyone can follow anyone across the network. There are no ads, no engagement algorithm deciding what you see, and no single owner to change the rules for everyone at once, which is the event that has sent waves of people there. What it asks of you: the choice of a server, which newcomers find genuinely confusing, and a tolerance for a quieter, less algorithmically stimulated feed. Your posts are public by default and your server's administrator holds real power over your account, so the privacy on offer is freedom from surveillance capitalism rather than secrecy. MeWe is the most familiar-feeling thing on this list: profiles, groups, pages and chat, shaped like the big networks but funded by subscriptions and paid extras instead of advertising. Because nobody is buying targeting, there is no tracking-and-profiling machinery at the centre of the product, and the company's pitch is built on a plain-language privacy bill of rights. What it asks of you: money for the premium features, and the network-effect problem, because a social network is only as useful as the people on it, and most of the people you know are not there. Diaspora was making the federation argument years before Mastodon popularised it. It is open-source and decentralised into servers called pods; you join one, own your data, and connect across the network from there. It pioneered ideas that spread widely, including sorting contacts into aspects so that different circles of people see different sides of you. The project is community-run with no company behind it at all. What it asks of you: patience. Development is slow, the network is small, and the experience is spartan. It suits people who care about the principle at least as much as the product. Session is for the far end of the privacy spectrum. It is an encrypted messenger that asks for no phone number and no email: your identity is a generated key, and messages are routed through an onion network so that even metadata, the record of who talked to whom, is hard to assemble. What it asks of you: everything that comes with that. Contact discovery is manual, some conveniences are missing by design, and the people you want to reach will mostly not be on it. It is a tool for those whose threat model justifies it. Look at what people actually post on the mainstream platforms and a large share of it was never social at all. The photographs of children growing up. The grandparents' anniversary. The last picture of somebody. This material was put on a feed because the feed was where the camera roll went, and it is the one category of material that should not be in an advertising system's custody. For that share, the answer is not a better network. It is not a network. Confinity is a private family archive: invite-only, no feed, no follower counts, nothing public and nothing used to train anything. You put the family's record in it, the people you invite can see it, and everything exports in open formats whenever you choose to leave. Use Signal for the conversations and Mastodon for the public square, if you want one. The memories were never social. Put them somewhere built for keeping.
What we preserve here

An essay is a smaller archive, a way of saying something is worth keeping in words. Confinity is the larger version of the same instinct.

More essays

All essays
Heritage library
Start your own archive