Nothing Chats Messaging App Faces Privacy Concerns, Withdrawn from Play Store

Last week, UK-based startup Nothing, led by Carl Pei, launched the Nothing Chats messaging platform in collaboration with Sunbird. The app aimed to bridge messaging barriers between Android and iOS devices, allowing Nothing Phone 2 users to send iMessages as blue bubbles. However, the beta version faced privacy and security concerns, leading to its withdrawal from the Google Play Store.

Bug Fixes and Privacy Issues

Nothing officially stated that it's "delaying the launch until further notice to work with Sunbird to fix several bugs." While the company did not specify the nature of these bugs, users had raised concerns about the app transmitting Apple ID credentials via the less secure HTTP instead of HTTPS. Users logging in with their Apple ID were required to pass through a remote Mac server, raising questions about the security of this process.

Criticism and Security Flaws

Criticism intensified as users pointed out significant security flaws. Kishan Bagaria criticized the app for being "extremely insecure," highlighting the lack of end-to-end encryption for messages sent through Sunbird's system. Dylan Roussel pointed out that Sunbird had access to all messages on a user's device, while another user, wukko, revealed that the app sent messages and media attachments to Sentry and stored "all" data through Firebase without encryption.

Nothing Chats Features and Purpose

The Nothing Chats app was designed to bring iMessage support to Android, allowing blue bubble conversations with iMessage users. It supported RCS for compatible devices, offering features like end-to-end encryption, group messaging, live typing indications, high-resolution media sharing, and more.

Bridge Between Android and iPhone Users

Acknowledging the age-old distinction between blue and green chat bubbles for iPhone and Android users, Nothing Chats sought to be a bridge between the platforms. However, concerns over privacy have led to the withdrawal of the app from the Google Play Store, with the full launch postponed until further notice.

Via