The removal of end-to-end encryption from Instagram direct messages by May 8, 2026, raises a question that extends well beyond Instagram and even beyond Meta: are big tech privacy promises worth anything? The answer, as revealed by the Instagram case, is deeply uncomfortable.
Meta’s 2019 commitment to cross-platform encryption was public, specific, and widely reported. It was treated as a significant development in the ongoing debate about digital privacy. Privacy advocates cited it as evidence that market pressure and public expectation could push even large tech companies toward stronger privacy protections. Six years later, that commitment is being partially reversed — quietly, via a help page update, with the commercial opportunities created by the reversal unexplained.
This pattern is not unique to Meta. Across the tech industry, privacy commitments are routinely made as part of marketing or public relations strategies, implemented in limited or diluted forms, and then quietly reversed when they conflict with commercial interests or institutional pressures. The Instagram case is simply a particularly clear and well-documented example of this pattern.
For advocates of strong digital privacy, the lesson of the Instagram case is that corporate privacy promises — even public, specific, and widely reported ones — are unreliable instruments of privacy protection when they are not backed by law. The only sustainable protection against this pattern is regulation: enforceable legal requirements that prevent companies from reversing privacy commitments without meaningful accountability to users and regulators.
The future of big tech privacy promises depends on whether that kind of regulation materializes. Currently, the regulatory environment in most jurisdictions is not robust enough to prevent the kind of quiet reversal that Instagram represents. European data protection law comes closest to providing this kind of protection, but it is not universal. Until enforceable privacy standards are the norm rather than the exception, big tech privacy promises will remain what they have always been: nice words that are subject to change when the commercial winds shift.