WhatsApp ruling from Berlin: Why even people without WhatsApp can now breathe a sigh of relief
For almost ten years, the consumer association has been litigating against Meta. The ruling was issued in February 2026 — and it very likely affects you too. Even if you don't use WhatsApp at all.
Honestly: Have you ever wondered how Facebook knew your landline number? Or why a distant acquaintance, whom you last saw fifteen years ago at a wedding, is suddenly suggested as a "person you might know"? The answer is surprisingly simple — and it's not due to your own behavior. It's in the address books of the people you're in contact with.
It was precisely this practice that the Berlin Regional Court II put a stop to on February 24, 2026, after almost a decade of legal dispute. File number 52 O 22/17 — a number that sounds as dry as the file number of an owners' meeting, but certainly has explosive power.
What it was actually about
The story begins in 2014, when Facebook (not yet "Meta" at the time) acquired the messaging service WhatsApp for 19 billion US dollars. At the time, they solemnly promised that nothing would change regarding data protection practices. Just two years later, in August 2016, this promise was history. WhatsApp sent its users a small, friendly-worded push notification to their phones — most people instinctively tapped "Agree" because they wanted to continue chatting. But what they agreed to was significant: complete access to their phone's entire address book. Including all phone numbers of people who don't even use WhatsApp.
You probably didn't read it then. Nobody read it. That was precisely the trick.
In 2017, the Federation of German Consumer Organizations sued against this practice and, with great patience, fought through all instances until the current ruling. The Berlin judges ruled against Meta on two key points: First, the users' consent at the time was legally invalid because it was neither sufficiently informed nor truly voluntary. Second — and this is the real bombshell — WhatsApp was not permitted to process the phone numbers of people who were not WhatsApp users themselves anyway. No one ever asked these people if their number could end up in a database in California.
Why this affects so many people
Imagine you give a good acquaintance your business card. You assume he puts it in his drawer — not that he sells it, along with 300 other business cards, to an American corporation that builds a shadow profile of you from it. That's exactly what happened for years, millions of times over.
If you use WhatsApp yourself and tapped "Allow access to address book" when you first started it — and you most likely did, because otherwise contact selection doesn't work — then over the years you have forwarded the data of your entire acquaintance circle to Meta. Your old school friend, your former colleague, your family doctor, your tax advisor. Even those who never had a Meta app on their phone themselves.
It's not your fault. You were lured into a trap with a seemingly harmless question. But legally, it was still not okay — and the Berlin court has now confirmed this.
What you can do specifically
Even if the judgment is not yet legally binding and Meta can appeal, you don't have to wait passively. Three steps that can be done in ten minutes:
Revoke WhatsApp's access to the address book. On the iPhone, go to Settings → WhatsApp → Contacts and toggle the switch. On Android devices, go to Settings → Apps → WhatsApp → Permissions → Contacts. WhatsApp will then suggest contacts less conveniently, but will still function — you simply enter phone numbers manually if needed.
Follow up with Meta yourself. Under the General Data Protection Regulation, you have the right to know what data Meta has stored about you — and you can demand its deletion. The official contact point is privacycenter.facebook.com. Even if you don't have a Facebook account, you can submit a request for your "shadow profile" there.
Know alternatives without having to switch immediately. If you don't want to miss the convenience of WhatsApp, you don't have to throw everything overboard. But for sensitive conversations — with your tax advisor, doctor, family — there are data protection-friendly messengers like Signal or Threema, developed in Switzerland. Both work on any smartphone and, once you get used to them, are just as easy to use as WhatsApp.
What happens next
Meta will most likely appeal the ruling — for a corporation of this size, an appeal is the standard procedure. So it could still take a year or two until a final judgment is available. Until then, however, the Berlin ruling remains a clear signal: The days of first collecting data and then seeing if anyone notices are definitely over in Europe.
For you personally, this means: With a few simple steps on your smartphone, you can immediately stop contributing to this silent "data sell-out." And the next time your niece or grandchild tells you over family coffee that data protection "doesn't matter anyway," you now have a concrete story ready.
Questions that are sure to arise now
Do I have to delete WhatsApp now because of this?
No, you don't have to. The ruling prohibits Meta from sharing data in its previous form — it does not prohibit the use of WhatsApp. However, anyone who wants to continue using the messenger should revoke address book access in the smartphone settings. This minimally restricts convenience but protects you and your contacts.
Am I also affected if I don't even have WhatsApp?
Most likely yes. As soon as just one of your acquaintances uses WhatsApp with active address book access, your phone number has ended up with Meta in recent years. It is precisely this practice that the Berlin court has declared unlawful. You can request information about the data stored for your number from Meta at privacycenter.facebook.com — even without your own account.
Will the already shared data be deleted automatically now?
Unfortunately, no. The ruling prohibits future practice and obliges Meta to remedy the situation — what this means in detail will become clear in the implementation. If you want to be sure, you can submit a deletion request yourself according to the GDPR. This can be done informally via Meta's Privacy Center and is free of charge.
Can I claim damages from Meta?
Possibly. In parallel with the current ruling, the Federation of German Consumer Organizations has a separate class action lawsuit against Meta pending before the Higher Regional Court of Hamburg (file no. 11 VKI 1/24), which relates to the 2021 data leak. There, up to 600 euros in damages per affected person are being claimed. Whether the current address book decision opens up similar claims is open — you would do well to keep an eye on the consumer association's reporting on this.
What good is the ruling if Meta appeals?
Even a non-legally binding ruling has an effect. Meta will already have to adapt its practice as a precautionary measure, because further identical lawsuits are otherwise foreseeable. Furthermore, the ruling signals to other platforms — from TikTok to LinkedIn — that the method of "first siphon off the address book, then see who complains" is finally over in Germany.
Are Signal and Threema really more privacy-friendly?
Both are considered significantly more trustworthy than WhatsApp by data protection experts. Signal (non-profit foundation in the USA, open source code) completely refrains from collecting metadata — not even Signal itself knows who chatted with whom and when. Threema (public limited company in Switzerland) charges a one-time fee (around 6 euros), but even works without depositing a phone number. Both apps are as user-friendly as WhatsApp and available in German.
Sources: Federation of German Consumer Organizations (vzbv), press release of the Berlin Regional Court II dated 02/25/2026, Heise Online, Golem.de.
