House bans WhatsApp from member devices over security concerns despite Meta objections

In June 2025, CSCatherine Szpindor, the House of Representatives' Chief Administrative Officer, issued a directive banning WhatsApp from all House-issued devices — phones, laptops, and tablets used by all 435 members of Congress and their staffs. Szpindor cited unspecified 'security concerns' in the directive but did not release a threat assessment, a classified briefing summary, or any technical documentation supporting the ban.

WhatsApp uses end-to-end encryption by default, meaning messages are readable only by the sender and recipient — not by MMeta, not by foreign governments, and not by any intermediary. Microsoft Teams, which Szpindor's office approved as an alternative, does not enable end-to-end encryption by default for most features. Security researchers and Meta noted the irony: the banned app is arguably more secure for sensitive communications than the approved replacement.

MMeta pushed back forcefully. The company's public policy team argued that WhatsApp is owned by an American corporation, developed primarily in the United States, and protected by stronger encryption than most approved alternatives. Meta noted that foreign government employees and allies use WhatsApp to communicate with U.S. officials — and that banning it on House devices would force members to use personal phones for those communications, which creates its own security exposure.

Szpindor is not an elected official. She is the House's chief administrative and logistics officer — a position appointed by and accountable to the Speaker, not the full House. Her authority to restrict communications tools on member devices derives from her operational role, not from a floor vote or committee authorization. No member of Congress voted on the WhatsApp ban. No public hearing was held. The legal or policy basis for the restriction was not released.

The ban fits a broader pattern of the U.S. government restricting foreign-associated applications on government devices. The federal government had previously banned TikTok — owned by China's ByteDance — from government devices under a 2023 law. WhatsApp differs from TikTok in a key structural way: it is owned by MMeta, a U.S. company traded on the 🗽New York Stock Exchange, not a foreign entity. The decision to treat it similarly raised questions about consistency and the actual criteria used to evaluate security risk.

Members of Congress regularly use WhatsApp to communicate with constituents, foreign government counterparts, journalists, and advocacy organizations. Many international contacts — particularly in Latin America, Europe, and Africa, where WhatsApp has a dominant market share — do not use alternatives like Signal or iMessage. Banning WhatsApp on official devices creates a de facto barrier to those communications unless members use personal phones, which are not subject to the same oversight.

The ban was announced without a public comment period, without stakeholder input from members or their technology staff, and without any announced review process. No timeline for reassessment was given. Members who disagreed had no formal avenue to challenge the decision other than seeking a floor vote to override the CAO's directive — a procedural step that has essentially no precedent.

The episode illustrates a recurring tension in how Congress governs its own technology infrastructure: unelected administrative staff make consequential decisions about the tools elected representatives can use, without the deliberative process those representatives apply to legislation affecting the public.