I Got This Wrong Too

Last year, my friend Xiaowen (she runs a brand consulting practice) and I were sitting in a café at 3 p.m., and I casually dropped a client's competitive- analysis screenshot into a WeChat group with our partner. We assumed only the three of us could see it. What we hadn't stopped to think about: group chat logs sit on platform servers — and we had no idea where those servers were or which country's laws applied to them. That blind spot hit home when I read about a Dubai airline employee who was arrested based on a work photo they'd forw arded in a WhatsApp group. A private group chat is not the same as a private space. That story made me take a hard look at my own habits.

" Private Group" ≠ "Only Group Members Can See This"

A lot of us — myself included, until recently — operate on the assumption that an encrypted group equals a safe group. But a message's actual security depends on three things: where the app's servers are located, which country regulates them, and whether the platform itself has a backd oor. WhatsApp does offer end-to-end encryption at the technical level, but the platform can still see your metadata — who you talk to, when, how often — and it falls under U.S. jurisdiction. The situation with WeChat is something most people in this space already understand intuitively.

As freelancers or small-team operators, what we're actually trying to protect usually isn't state secrets. It's: client contract details, pricing screenshots, product plans that aren't public yet. If that stuff leaks, you lose trust — and you lose business. I know an independent designer, Ajie, who early on tossed a client's logo draf ts into a multi-person group chat without thinking twice. The drafts got out. The client walked .

What You Can Do Today — and What It Costs

Money: starts at $0 (everything I mention below has a free tier)
Time: 10– 15 minutes for first-time setup
Technical barrier: if you can use WeChat, you can use these tools — no technical background needed

My approach now is to handle communication in layers:

  • Casual chat, announcements, everyday updates : WeChat is still fine. No change needed.
  • Anything touching client data, pricing, or contracts: I've switched to Signal (free app , available on iOS and Android). Signal's servers don't store message content, and you can set messages to auto-delete after they're sent. First step: search "Signal" in your app store, download it, register with your phone number, then pull your key collaborators in and start a small group. That's it.
  • Sending files: Don't send sensitive files as raw images or PDFs. Either use a burn -after-reading link service (a one-time link that expires after the recipient opens it), or add a watermark to the file so you can trace which step in the chain a leak came from.

I only got these habits sorted out recently. Before this, I was stuffing everything into WeChat out of convenience. Now I at least keep the sensitive stuff in a separate channel.

Do You Need to Switch Right Now? Depends.

If you're just starting out and don't have steady clients yet: No rush. Bookmark this and come back when your first paying client shows up.

If you already have one or two clients and you're handling contracts or quotes: I'd spend 10 minutes installing Signal — even if you only use it for contract screenshots. Not because something will definitely go wrong, but because if it does, you'll have a fallback.

If you're scaling up, your team is three or more people, and client data is p iling up: It's worth sitting down and thinking through a communications protocol — which type of information goes through which channel, written down explicitly. This isn't just for big companies. I've seen a two-person team blow up a client relationship badly over exactly this.

Not everyone needs to make this switch today . But understanding that "private group" doesn't mean "private" — if you're building a personal brand or running a service business, I think that 's worth five minutes of your attention.