As there has been a lot of inaccurate information circulating online about Proton Mail and Huawei, the purpose of this blog post is to clarify the facts and provide information to the Proton community.
Background
On September 5th, 2019, we announced(nouvelle fenêtre) that we would be bringing Proton Mail to the F-droid alternative app store as part of our push to support alternative distribution channels in addition to Google Play, for users that either don’t want to or can’t use Google. In our announcement, we mentioned 3 other alternatives that we are considering to support (these are being considered, so a final decision has not been made). The other options listed were the Samsung Galaxy Store, the Amazon App store, and the Huawei AppGallery.
This part of our announcement caught the attention of Bloomberg who published an article on September 6th that Proton Mail was in talks with Huawei about a potential “partnership”. This is a misunderstanding of the situation because just as being in the Apple App Store or the Google Play store does not imply that we are “partnering” with Apple or Google, this does not imply we are “partnering” with Huawei. Unfortunately, in the past 48 hours, this story has gained a significant amount of traction online and continues to be misinterpreted by many people. Because of that, we would like to add some clarifications.
What is Proton Mail discussing with Huawei?
As stated above (and also in our original post(nouvelle fenêtre)), our discussions with Huawei are about continuing to make Proton Mail available to users who have Huawei devices. Today, Proton Mail is already available on Huawei, as our Android app is distributed on Huawei devices through the Google Play store, so in terms of supporting Huawei devices, there is no change from the current situation.
What is changing is that in addition to making Proton Mail available to Huawei users through Google Play, we may also make Proton Mail available through the Huawei AppGallery.
Why support Huawei AppGallery?
Today, there are already hundreds of thousands of people using Proton services on Huawei devices through Google Play. However, due to an ongoing dispute between the US and China, it is possible that all Huawei devices globally (not just the devices in China) would no longer have access to the Google Play store, making it impossible for Huawei device users to download or update the Proton Mail app. As Huawei devices are especially popular in developing countries where Proton has many users (Huawei is the world’s second-largest mobile device manufacturer), publishing on the Huawei AppGallery could become essential to continue supporting these user communities.
Note, unlike what some have alleged, this does not indicate a shift in current policy, as today, we already offer support for Huawei devices. This is, therefore, a question about whether or not we will continue to support Huawei devices going forward.
Will supporting Huawei devices put Proton Mail under Chinese control?
First, we want to reiterate that regardless of our decision regarding Huawei AppGallery, there is no change today as it is already possible to use Proton Mail with a Huawei device. Thus, the actual question is: “to what extent can China influence companies which offer services to its citizens?”. The answer to this question is completely independent from Huawei AppGallery.
The applicable Chinese law is the China Internet Security Law which came into force in 2017. The law essentially stipulates that foreign companies which operate in China and process the private information of Chinese citizens, must store such data in China and make it available to Chinese authorities upon request. An example of a company which has had to comply with this law is Apple, which has extensive operations in China. A similar law went into effect in Russia back in 2015 (known as Federal Law No. 242-FZ).
Proton does not have offices, employees, subsidiaries, or any permanent establishments in China or Russia, and even if the authorities in these countries considered us to be within the law’s scope, these laws cannot be enforced against us. Indeed, this is what happened in Russia in 2018 when the Federal Service for Supervision of Communications (Roskomnadzor) attempted to apply the Russian law to Proton Mail, with the threat of being banned from Russia if we did not comply. In this case, we politely declined to comply on the grounds that we do not operate in Russia.
Proton’s position on this is clear, and has never wavered from day one. As a Swiss company, when it comes to the data of Proton users, we will only comply with the laws of Switzerland, the jurisdiction of our headquarters and where all of our servers are located. As we have always consistently stated in our terms and conditions and privacy policy, any requests which fall outside of Swiss law will be politely refused. That is not to say that we ignore foreign law enforcement requests and provide a safe haven for criminals, its just that we require all matters regarding Proton users to be adjudicated in Switzerland, through established international legal assistance channels.
Is it safe to use Proton Mail on Huawei devices?
As with any question of safety, the answer depends primarily on your threat model and who you trust. Depending on the user, Google may be more trustworthy than Huawei or vice versa, or perhaps both Google and Huawei are untrustworthy. The fact remains that Google’s Android OS powers 87% of mobile devices, and Huawei is the world’s second-largest mobile device manufacturer, thus, these near-monopolies are not avoidable for many people. We are committed to growing the Proton ecosystem to eventually offer a safe and private choice to everyone, fully independent from these monopolies, but even then, we cannot and should not eliminate user choice lest we become a monopoly ourselves.
With regards to the concerns that many in the Proton Mail community may harbor (and which we also share to some extent), we believe that adding a second distribution model on Huawei devices in addition to Google Play, isn’t inherently more or less secure with regards to the risks of Chinese spying. Mobile device security is intimately connected to the preloaded operating system, so whether it is Apple, Samsung, Google, or Huawei, regardless of how you download your apps, you are also relying on your device manufacturer to safeguard your privacy.
Another way to say this is, only you can decide if you trust Huawei or not, and if you don’t trust Huawei, don’t use a Huawei device, and don’t download Proton Mail from Huawei AppGallery. We just don’t think it makes sense to preemptively drop support for users who may not have a choice in this matter.
What about China’s policies and human rights violations?
At Proton Mail, Swiss neutrality is one point that we take a lot of pride in. However, our views about human rights, online freedom, and democracy are well known. Words are empty in this regard, so we would prefer to let some of our past actions speak for themselves.
In the past years, we have trained journalists at the Second Asian Investigative Journalism conference(nouvelle fenêtre), developed one of the world’s most widely used open source encryption libraries(nouvelle fenêtre), and helped force a nationwide referendum(nouvelle fenêtre) on Swiss surveillance laws(nouvelle fenêtre). We’ve spoken about privacy at TED(nouvelle fenêtre) and at a United Nations conference(nouvelle fenêtre) about combating terrorism while protecting human rights online. We recently worked with Reporters Without Borders Berlin(nouvelle fenêtre) to sponsor a scholarship program for journalists, and also provided funding for the largest independent news outlet in Belarus(nouvelle fenêtre).
There are not many who believe more strongly in privacy and freedom than us. Just like our support for Google Play does not mean that we agree with Google’s position on privacy (in fact, we have condemned it strongly(nouvelle fenêtre)), supporting Huawei does not imply that we agree with China’s position on a number of issues. Our goal has always been to make privacy accessible to as many people as possible, and we just don’t think that goal is best served by cutting off support for the hundreds of millions of people who use Huawei devices.
Conclusion
We hope this offers more clarification and context to the community about this matter. As per our usual policy of full transparency, any decision that is made will always be announced to the Proton community on this blog. We welcome also your input on our social media channels on Twitter(nouvelle fenêtre) and Reddit(nouvelle fenêtre).
Best Regards,
The Proton Mail Team
