Meta introduces Incognito Chat on WhatsApp, the first AI feature that it claims even Meta cannot access.
The newly introduced mode runs Meta AI on WhatsApp within the company’s Private Processing enclave, ensuring conversations are deleted automatically and no server-side records are kept.
Meta has unveiled an Incognito Chat mode for Meta AI on both WhatsApp and the Meta AI app, addressing the uncomfortable reality that its assistant, similar to other major AI chatbots, could previously access users' conversations.
The company's announcement on Tuesday revealed that this new mode processes user messages in a secure environment that even Meta cannot access, with conversations being deleted by default at the end of each session.
The technical foundation is based on WhatsApp’s Private Processing system, an architecture introduced by the company in April 2025, which allows AI functionalities to operate on encrypted data within Trusted Execution Environments on Meta’s servers.
Within that enclave, the model can read and respond to queries, yet the content remains inaccessible to Meta’s engineers, logging systems, or any commercial operations.
While other applications claim to have incognito modes for AI conversations, Meta's announcement differentiates itself by stating, “they can still see the questions coming in and the answers going out.”
This launch addresses a widespread privacy concern in the industry, as AI chatbots have become the go-to tool for questions users would previously ask doctors, lawyers, or partners, leading to significant data exposure risks.
OpenAI, Google, and Anthropic generally store conversation histories by default, offering varying levels of user control. Apple Intelligence processes some queries through Apple’s Private Cloud Compute, which closely resembles what Meta is now implementing within WhatsApp.
Two product specifics emerge from this design. First, conversations are not saved on the server at all; users cannot access Incognito Chat history later as there is no history to retrieve.
Secondly, the default disappearing behavior minimizes potential leaks, as the chat residue is cleared between sessions, even if a device is compromised.
Meta has released a technical whitepaper outlining the cryptographic architecture for external evaluation.
A second feature is forthcoming. Sidechat with Meta AI, also secured by Private Processing, will allow users to receive AI assistance within an ongoing WhatsApp conversation, keeping the assistant aware of the chat context while ensuring its responses remain hidden from other participants.
Meta indicated that Sidechat will launch on WhatsApp “in the coming months,” without providing a specific timeline.
The commercial rationale behind the launch is clear. WhatsApp has been centered around end-to-end encryption as a key selling point for a decade, and Meta has needed to navigate the inherent conflict of a conversational AI assistant requiring access to messages for effectiveness.
Private Processing is Meta's solution to reconcile this issue. The Incognito Chat product marks the first time this architecture has been incorporated into a user-facing feature at such a scale.
However, whether the implementation withstands scrutiny remains an open question. AI systems based on Trusted Execution Environments have faced audits and criticisms across the industry, with researchers periodically exposing side-channel attacks on similar architectures from Apple, Google, and other major providers.
Meta has welcomed external reviews of its Private Processing design, and the new whitepaper reinforces this stance, though the model’s resilience against subpoenas has not yet been tested in court.
Incognito Chat with Meta AI is set to begin rolling out on WhatsApp and the Meta AI app this week, with wider availability expected in the months ahead.
The launch arrives during a challenging period for Meta regarding privacy issues, with U.S. employees protesting the company’s newly implemented mouse-tracking software and the company approaching layoffs of approximately 8,000 employees within the week.
Internally, Meta seems to be banking on consumer-facing privacy initiatives like this one to overshadow concerns about internal surveillance.
Other articles
Fractile's $220 million funding round comes as Anthropic targets its UK semiconductor operations.
Fractile has secured $220 million to bring its SRAM-based inference chip to market, with Accel leading the funding round and Pat Gelsinger participating as an investor.
Fractile's $220 million funding round comes as Anthropic looks towards its UK silicon.
Fractile has secured $220 million to move its SRAM-based inference chip into production, with Accel as the leading investor and Pat Gelsinger also contributing.
Meta introduces Incognito Chat on WhatsApp, its first AI feature that the company claims even it cannot access.
Meta has introduced Incognito Chat featuring Meta AI on WhatsApp, where discussions are handled within a secure enclave that the company claims even its own engineers cannot access.
Meta introduces Incognito Chat on WhatsApp, the first AI feature that it claims even Meta cannot access.
Meta has introduced Incognito Chat with Meta AI on WhatsApp, where conversations are handled within a secure enclave that the company claims is inaccessible even to its own engineers.