The Privacy Trade-Off You Didn't Know You Agreed To

You assume your messages are private. But what if that assumption is the vulnerability? 

In this episode of SipCyber, Jen Lotze settles in at Estuary in St. John's Island with a wheat ale and unpacks a quiet but significant shift in how two of the world's biggest social platforms handle your private conversations. Instagram is walking back end-to-end encrypted DMs—meaning the platform can once again read, scan, and analyze your messages. And TikTok? It never offered that protection to begin with. 

This isn't about paranoia. It's about knowing what "private" actually means in 2025—and closing the gap between how things feel and how they actually work. 

Key Topics Covered: 

• What end-to-end encryption is—and why Instagram just stepped away from it 
• Why TikTok DMs were never as private as users assumed 
• The real trade-off between platform safety and personal privacy 
• How your "private" messages can be accessed, reviewed, and analyzed 
• Why assumption is the most common cybersecurity vulnerability 

☕ Featured Spot: Estuary, St. John's Island 

Think your DMs are private? Subscribe for weekly cybersecurity awareness delivered from coffee shops and breweries—and share this with someone who needs a reality check on their social media habits. 

#Privacy #SocialMediaPrivacy #Instagram #TikTok #Encryption #CyberSecurity #DataPrivacy #SipCyber #InfoSec #DigitalSafety #OnlineSafety #EndToEndEncryption #MetaPrivacy 

Transcript

Jen Lotze 0:03

Hey there, coffee lovers and internet explorers. Welcome back to Sip Cyber. There's something about the first sip that decides things for you. I'm sitting here at Estuary in St. John's Island with a wheat ale in front of me, and it tastes like summer. Even though technically it's warmer in the Twin Cities right now than it is here. And I know that. But the taste, the light, the moment, they're all telling a different story. I'd been sitting out in the sunshine earlier, that kind of afternoon where time just loosens a little. And by the time I made my way out here to Estuary, that same rhythm had followed me. That end of the day feeling. Conversation stretching a little longer, phones sitting face down on tables, no one in a rush. It felt easy. And when sometimes things feel easy, we tend to trust them. Not because we've checked anything, just because nothing feels off. That's how trust usually works in real life. It builds quietly, through time, through small signals, through consistency. You don't question every detail, you just settle in. But online, that same instinct doesn't always hold up. I was reading a piece earlier about TikTok and Meta. Meta owns Facebook, Instagram, and it made something really clear. The idea of private messaging on social media isn't as solid as it might feel. Instagram is stepping away from end-to-end encrypted messages, which means that the platform will be able to read and scan your direct messages again. For things like moderation, scams, and law enforcement requests, and TikTok confirmed it never offered that level of encryption in the first place. Which means in both cases, those messages aren't just between you and the person you're talking to. They can be accessed, reviewed, and analyzed, sometimes for safety, sometimes for compliance, but either way, not as private as most people assume. And that's the shift. For a long time, platforms talked about privacy like it was a given. Now it's becoming clear there's always a trade-off. More privacy can make it harder to catch scams. Less privacy makes it easier for platforms to monitor what's happening. And somewhere in the middle is where most of us are living, whether we realize it or not. So the real risk isn't just data collection. It's the assumption, the quiet belief that if something feels private, it must be, the same way this drink feels like summer, even when the numbers say otherwise. And over time, those assumptions add up. Messages shared more openly than you might intend. Conversations that feel one-to-one but aren't fully out of reach. That's where a small pause will help. Take five minutes today and look at how you're using your direct messages on social media. Just notice what you're sharing and ask yourself one simple question. Would I be comfortable if this message wasn't completely private? If the answer is no, it might be better to send another way. Or maybe don't send it at all. Because control online doesn't come from what feels private, it comes from understanding what actually is. And sitting here now, taking another sip. Super yummy. It still tastes like summer, and maybe that's fine. Not everything needs to be questioned, but some things do. And knowing the difference, that's where awareness starts. Stay safe, stay warm, and keep sipping.