Proton
google search risk

In the past two months, many of you have reached out to us to ask about the mysterious tweets we sent to Google in August(nouvelle fenêtre). At Proton(nouvelle fenêtre), transparency is a core value, and we try to be as transparent with our community as possible. As many people have continued to point out to us, we need to be more transparent here to avoid continued confusion and speculation. Thus, we are telling the full story today to clarify what happened.

What Happened?

The short summary is that for nearly a year, Google was hiding Proton Mail from search results for queries such as ‘secure email’ and ‘encrypted email’. This was highly suspicious because Proton Mail has long been the world’s largest encrypted email provider.

When Proton Mail launched in Beta back in May 2014, our community rapidly grew as people from around the world came together and supported us in our mission to protect privacy in the digital age. Our record breaking crowdfunding campaign(nouvelle fenêtre) raised over half a million dollars from contributors and provided us with the resources to make Proton Mail competitive against even the biggest players in the email space.

By the summer of 2015, Proton Mail passed half a million users(nouvelle fenêtre) and was the world’s most well known secure email service. Proton Mail was also ranking well in Google search at this time, on the first or second page of most queries including “encrypted email” and “secure email”. However, by the end of October 2015, the situation had changed dramatically, and Proton Mail was mysteriously no longer showing up for searches of our two main keywords.

Between the beginning of the summer and the fall of 2015, Proton Mail did undergo a lot of changes. We released Proton Mail 2.0, we went fully open source(nouvelle fenêtre), we launched mobile apps in beta, and we updated our website, changing our TLD from .ch to the more widely known .com. We also doubled in size, growing to nearly 1 million users by the fall. All of these changes should have helped Proton Mail’s search rankings as we became more and more relevant to more people.

In November 2015, we became aware of the problem and consulted a number of well known SEO experts. None of them could explain the issue, especially since Proton Mail has never used any blackhat SEO tactics, nor did we observe any used against us. Mysteriously, the issue was entirely limited to Google, as this anomaly was not seen on any other search engine. Below are the search rankings for Proton Mail for ‘secure email’ and ‘encrypted email’ taken at the beginning of August 2016 across all major search engines. We rank on either page 1 or 2 everywhere except Google where we are not ranked at all.

All throughout Spring 2016, we worked in earnest to get in touch with Google. We created two tickets on their web spam report form explaining the situation. We even contacted Google’s President EMEA Strategic Relationships, but received no response nor improvement. Around this time, we also heard about the anti-trust action brought forward by the European Commission against Google(nouvelle fenêtre), accusing Google of abusing its search monopoly to lower the search rankings of Google competitors(nouvelle fenêtre). This was worrying news, because as an email service that puts user privacy first, we are the leading alternative to Gmail for those looking for better data privacy.

In August, with no other options, we turned to Twitter to press our case. This time though, we finally got a response(nouvelle fenêtre), thanks in large part to the hundreds of Proton Mail users who drew attention to the issue and made it impossible to ignore. After a few days, Google informed us that they had “fixed something” without providing further details. The results could be immediately seen.

google protonmail search risk

In the above plots, the x-axis is time and the y-axis is search ranking (lower number is better). The dates where there are no data points are times when we are not ranked at all by Google. After Google made some changes, Proton Mail’s rankings immediately recovered and are now ranked #1 and #3 for ‘secure email’ and ‘encrypted email’ respectively. Without any additional explanation from Google, we may never know why Proton Mail become unranked. In any case, we do appreciate Google finally taking action to resolve the issue, we just wished it happened sooner.

The Danger of Search Risk

This incident however highlights a previously unrecognized danger that we are now calling Search Risk. The danger is that any service such as Proton Mail can easily be suppressed by either search companies, or the governments that control those search companies. This can happen even across national borders. For example, even though Google is an American company, it controls over 90% of European search traffic(nouvelle fenêtre). In this case, Google directly caused Proton Mail’s growth rate worldwide to be reduced by over 25% for over 10 months.

This meant that Proton Mail’s income from users was also cut by 25%, putting financial pressure on our operations. We went from being able to cover all our monthly expenses to having to draw from our emergency reserve fund. The lost income and financial damage incurred as a result was several hundred thousand Swiss Francs (1 CHF = 1.01 USD), which will never be reimbursed.

The only reason we survived to tell this story is because the majority of Proton Mail’s growth comes from word of mouth, and our community is too loud to be ignored. Many other companies won’t be so fortunate. This episode illustrates that Search Risk is serious, which is why we now agree with the European Commission that given Google’s dominant position in search, more transparency and oversight is critical.

Take action now: DeGoogle your life for $1

Defending Against Search Risk

This incident illustrates that for Proton Mail to be successful, it is important that we can continue to grow independently of search engines so that it is impossible for any search company to intentionally or unintentionally cripple us. This is easier said than done, but there are easy actions that we can all do to safeguard the future of Proton Mail:

  • Tell your friends and family about Proton Mail. The other benefit of this is that you will also get automatic end-to-end encryption when you email them.
  • Writing articles or blog posts about Proton Mail and help spread the word about online privacy.
  • Upgrading to a paid account(nouvelle fenêtre) so we can rebuild our depleted emergency reserve fund faster.
  • Helping Proton Mail reach more people through social media. You can Tweet or share Proton Mail on Facebook with the share buttons below.

Share on Twitter(nouvelle fenêtre)   Share on Facebook(nouvelle fenêtre)

The more we get the word out about the importance of online privacy, the more we make it impossible to suppress, ban, or otherwise pressure encrypted email services such as Proton Mail. We believe online privacy is critical for an open, democratic, and free future, and regardless of the obstacles ahead of us, we will continue building the tools necessary to protect this future. Thank you for supporting us and making this possible.

For questions and comment, you can reach us at media@proton.me.

Get a free secure email account from Proton Mail(nouvelle fenêtre)

Proton Mail is supported by community contributions. We don’t serve ads or abuse your privacy. You can support our mission by upgrading to a paid plan.

Image Credit: Special thanks to Glasgow graphics designer James Belkevitz(nouvelle fenêtre) for providing the top image.

Articles similaires

The cover image for a Proton Pass blog comparing SAML and OAuth as protocols for business protection
en
SAML and OAuth help your workers access your network securely, but what's the difference? Here's what you need to know.
Proton Lifetime Fundraiser 7th edition
en
Learn how to join our 2024 Lifetime Account Charity Fundraiser, your chance to win our most exclusive plan and fight for a better internet.
The cover image for a Proton Pass blog about zero trust security showing a dial marked 'zero trust' turned all the way to the right
en
Cybersecurity for businesses is harder than ever: find out how zero trust security can prevent data breaches within your business.
How to protect your inbox from an email extractor
en
Learn how an email extractor works, why your email address is valuable, how to protect your inbox, and what to do if your email address is exposed.
How to whitelist an email address and keep important messages in your inbox
en
Find out what email whitelisting is, why it’s useful, how to whitelist email addresses on different platforms, and how Proton Mail can help.
The cover image for Proton blog about cyberthreats businesses will face in 2025, showing a webpage, a mask, and an error message hanging on a fishing hook
en
Thousands of businesses of all sizes were impacted by cybercrime in 2024. Here are the top cybersecurity threats we expect companies to face in 2025—and how Proton Pass can protect your business.