Four messengers. Four threat models. See how Swiss anonymity, onion routing, consumer calling, and China's super-app stack up — and where Blink adds device control those apps leave open.
The lineup
Privacy-first messengers and mainstream chat solve different jobs. This page is an honest map — not a claim that one app wins every scenario.
Switzerland
Swiss privacy without a phone number
A paid Swiss messenger that creates a random Threema ID — no phone or email required — with end-to-end encryption for messages, calls, and files by default.
Decentralized network (foundation-backed)
Decentralized, onion-routed messaging
A free, open-source messenger that routes traffic through an onion network of service nodes — no phone number, email, or central server that can map who talks to whom.
Luxembourg / Rakuten group
Consumer chat with cheap international calls
A Rakuten-owned messenger popular for stickers, communities, and low-cost calling. Chats and calls are end-to-end encrypted by default, but the product collects substantial metadata.
China
China's everyday super-app
Tencent's WeChat combines messaging, payments, Moments, and mini-programs at massive scale. It is built for convenience and ecosystem lock-in — not for confidential or adversarial threat models.
Side by side
Capabilities summarized from public product behavior. "Partial" means limits, optional modes, or weaker guarantees. Always verify against each vendor's current docs for your threat model.
Privacy & identity
Message contents sealed so the provider cannot read them in normal operation.
BlinkYesThreemaYesSessionYesViberYesWeChatNoPrivacy & identity
Account can be created without tying the identity to a mobile number.
BlinkYesThreemaYesSessionYesViberNoWeChatNoPrivacy & identity
Designed so the operator learns as little as possible about who talks to whom.
BlinkYesThreemaYesSessionYesViberNoWeChatNoPrivacy & identity
Legal or technical design that resists casual surveillance and data fishing.
BlinkPartialThreemaYesSessionYesViberPartialWeChatNoSecurity
Client code published for independent review.
BlinkPartialThreemaYesSessionYesViberNoWeChatNoSecurity
Compromised keys cannot reopen an unbounded past of messages.
BlinkYesThreemaPartialSessionNoViberPartialWeChatNoSecurity
No single central server holds the full routing graph.
BlinkYesThreemaNoSessionYesViberNoWeChatNoDevice control
Wipe or invalidate a lost device so it cannot keep reading ciphertext.
BlinkYesThreemaPartialSessionNoViberPartialWeChatPartialDevice control
A covert wipe path if the device is seized under coercion.
BlinkYesThreemaNoSessionNoViberNoWeChatNoDevice control
Blocks system or third-party keyboards from watching keystrokes.
BlinkYesThreemaNoSessionNoViberNoWeChatNoDevice control
App-level defenses against opportunistic screen capture.
BlinkYesThreemaPartialSessionNoViberPartialWeChatNoFeatures
In-app calling for real-time conversations.
BlinkYesThreemaYesSessionPartialViberYesWeChatYesFeatures
Time-boxed chats that leave less readable residue.
BlinkYesThreemaYesSessionYesViberYesWeChatPartialFeatures
Files (and often filenames) sealed outside the chat stream.
BlinkYesThreemaPartialSessionNoViberNoWeChatNoFeatures
Isolated workspaces with admin roles for real teams.
BlinkYesThreemaPartialSessionNoViberPartialWeChatPartialPlatforms & pricing
Usable across phone and computer without losing core guarantees.
BlinkYesThreemaYesSessionYesViberYesWeChatYesDeep dive
Private by design for high-stakes teams
Ciphertext-only servers, device control, duress wipe, Secure Locker, and multi-tenant Spaces — built for moments when a padlock icon is not enough.
Operator
Blink
HQ
US & India operations
Founded
—
Pricing
Team / enterprise plans
Platforms
Web, iOS, Android
Privacy fit
High — with device & duress controls
Best for: Newsrooms, legal, field & executive teams
Swiss privacy without a phone number
A paid Swiss messenger that creates a random Threema ID — no phone or email required — with end-to-end encryption for messages, calls, and files by default.
Operator
Threema GmbH
HQ
Switzerland
Founded
2012
Pricing
One-time purchase (consumer); Threema Work for orgs
Platforms
iOS, Android, desktop apps
Privacy fit
Very high — minimal metadata, anonymous ID
Best for: Individuals and orgs who want Swiss jurisdiction and anonymity
Decentralized, onion-routed messaging
A free, open-source messenger that routes traffic through an onion network of service nodes — no phone number, email, or central server that can map who talks to whom.
Operator
Session Technology Foundation / Oxen ecosystem
HQ
Decentralized network (foundation-backed)
Founded
2020 (Session)
Pricing
Free
Platforms
iOS, Android, desktop
Privacy fit
Very high on metadata — different trade-offs on delivery
Best for: Users who prioritize metadata resistance and anonymity
Consumer chat with cheap international calls
A Rakuten-owned messenger popular for stickers, communities, and low-cost calling. Chats and calls are end-to-end encrypted by default, but the product collects substantial metadata.
Operator
Rakuten Viber
HQ
Luxembourg / Rakuten group
Founded
2010
Pricing
Free (ads / commerce features)
Platforms
iOS, Android, desktop, tablets
Privacy fit
Moderate — E2EE content, heavy metadata & closed source
Best for: Friends and families who want calling + stickers at consumer scale
China's everyday super-app
Tencent's WeChat combines messaging, payments, Moments, and mini-programs at massive scale. It is built for convenience and ecosystem lock-in — not for confidential or adversarial threat models.
Operator
Tencent
HQ
China
Founded
2011
Pricing
Free (payments & services ecosystem)
Platforms
iOS, Android, Windows, macOS
Privacy fit
Low for sensitive work — surveillance-aligned architecture
Best for: Everyday life and commerce inside the WeChat ecosystem
Decision guide
Threema and Session compete at the top of consumer privacy. Viber encrypts content but harvests metadata. WeChat is a convenience super-app — not a confidential channel. Blink adds device-level and duress controls those privacy apps still leave open.
WeChat and Viber win on network effects. Threema and Session win when your contacts will install a privacy app. Blink is for teams that standardize on one controlled messenger — not for replacing WeChat Pay or Viber stickers.
Session, Viber, and WeChat are free at the consumer layer. Threema charges once (and sells Work seats). Blink is priced for teams that need Spaces, device control, and a security briefing — not ad-funded growth.
Pick the tool that matches the threat model. Anonymous journalism leans Session or Threema. Family calls lean Viber. Life in China leans WeChat. Privileged team work with seizure risk leans Blink.
Where Blink fits
Threema and Session excel when identity and metadata must stay thin. Viber and WeChat excel when reach and everyday convenience matter. Blink is for teams that also need remote wipe, duress wipe, Secure Locker, and Spaces — the layer consumer privacy messengers rarely ship.
Bring your threat model. We'll walk encryption, device control, and Spaces against the messengers your team already uses.
Read Private by design →Use Threema or Session for anonymous links, Viber or WeChat for low-sensitivity reach, and Blink when device seizure and team control are part of the brief.