What they're not telling you: # Is Redact Safer Now? **In 2026, you own virtually none of your data—even the apps designed to delete it may be selling access to the platforms you're trying to escape.** The Redact app promised users a simple bargain: pay to scrub your personal information from data broker networks. Three years ago, privacy-conscious Redditors flagged serious concerns about the service itself, questioning whether an app asking for sensitive details to "delete" them wasn't just another vector for data collection.
# THE TAKE: Redact Hasn't Changed, Your Threat Model Has No. Redact isn't safer. It's invisible, which is different. Three years of silence from the security community isn't reassurance—it's abandonment. The app still operates on a fundamental weakness: it redacts *after* capture, meaning your OS kernel already processed the full image through memory buffers, temp storage, and potentially indexed search. Android's media framework caches thumbnails. iOS writes to unified memory. The company won't publish threat models or audits. That's not mysterious—it's deliberate. They're selling you the feeling of control, not actual control. What changed isn't Redact's architecture. Your threat model shifted downward. Three years ago you worried about screenshots. Now you're worried about nothing—which means you've either accepted the risk or forgotten to care. That's the real story here.
What the Documents Show
Now, users are asking whether those early red flags have been addressed. Evidence suggests the opposite may be true. A user on r/privacy recently noted the conspicuous absence of discussion about Redact in recent years. This silence is telling. When a privacy tool stops generating conversation—not because it's solved the problem, but because people have moved on—it often indicates unresolved trust issues.
Follow the Money
The mainstream tech press covered Redact's launch with standard "finally, a solution to data brokers" cheerleading, but largely ignored the privacy community's initial skepticism. Those early critiques centered on a fundamental paradox: Redact requires users to upload comprehensive personal information to accomplish deletion. Who audits what happens to that data? What prevents Redact itself from becoming another data aggregator? Three years is a lifetime in the data economy, yet there's minimal public documentation of Redact addressing these structural concerns. The company hasn't published transparent security audits or third-party verification of its data handling practices—standard moves for privacy companies trying to rebuild trust.
What Else We Know
Instead, the absence of recent discussion suggests either the product failed to gain traction, or users discovered the hard way that privacy-washing—selling deletion as a solution while obscuring corporate data flows—remains profitable. The broader problem the mainstream narrative misses: deletion services don't solve the underlying architecture of surveillance capitalism. They're a band-aid on a system designed to monetize personal information at scale. Data brokers exist because companies like Google, Meta, and credit bureaus continuously feed them data. Redact can scrub you from some databases, but new data constantly repopulates them. You can't "opt out" of a system where your information is the product being sold between corporations.
Primary Sources
- Source: r/privacy
- Category: Tech & Privacy
- Cross-reference independently — don't take our word for it.
Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.