Acton didn't promise Signal would stay private forever — he made it structurally impossible to sell

the problem

A company's public promise not to compromise a core value under commercial pressure is only as good as whoever owns the company next, and a founder can't bind a future owner's incentives with words alone

background

what everyone would do

The standard way a founder protects a company's core commitment to users is a public pledge — a mission statement, a promise in the terms of service, a founder's personal word that the company will never sell out its values. Acton had direct, personal evidence that promise doesn't survive an ownership change: WhatsApp had made exactly that anti-ads, pro-privacy commitment to its users, and Facebook's acquisition proved a pledge is only as durable as whoever controls the company can be trusted to honor it once circumstances (or owners) change.

what they saw

Acton saw that the actual vulnerability wasn't the sincerity of anyone's promise, it was the existence of equity someone could buy and then redirect — as long as Signal had shares, there would always be a price at which an owner could sell control to someone with different incentives, the way WhatsApp's founders' own commitments had been overridden the moment Facebook owned the equity. Rather than found another company and promise to do better, he removed the mechanism itself: converting Signal into a nonprofit with no shareholders meant there was no equity for anyone to acquire, no board answerable to a profit motive, and no future version of himself or anyone else who could sell the promise away.

the move

The Signal Foundation restructured Signal's ownership so there was no equity for anyone to buy: no investors, no shares, no board answerable to a profit motive, funded instead by Acton's loan and ongoing donations. Marlinspike stated the organization had 'never taken VC funding or sought investment, because we felt that putting profit first would be incompatible with building a sustainable project that put users first' — the same tension Acton had just watched play out at his previous company, now foreclosed by structure rather than promised away.

why it works

By eliminating equity entirely rather than merely pledging not to sell it, the Signal Foundation closed off the specific mechanism that broke WhatsApp's promise — there is no share price at which Signal's mission could be acquired, because there are no shares, which means the commitment doesn't depend on any future leader's character or resolve the way a policy or pledge would. This is a genuinely different kind of guarantee than a mission statement: a mission statement can be revised by whoever next controls the company, but a structural fact (no shareholders exist) survives any change in leadership, funding pressure, or market conditions, because there's no lever left to pull. The mechanism paid off precisely when it mattered most — when WhatsApp's 2021 privacy-policy expansion validated users' original fear of exactly the kind of change Acton had watched happen from the inside, the resulting surge of tens of millions of new Signal users accrued entirely to a structure that could not repeat WhatsApp's history, converting a structural choice made years earlier into a trust dividend no marketing campaign could have manufactured on demand.

the payoff

When WhatsApp announced a 2021 privacy-policy update widening data sharing with Facebook, the backlash sent users to Signal in numbers no marketing campaign could have bought: Signal's Android install base jumped from roughly 10 million to over 40 million in a matter of days, with tens of millions of new signups overall, after high-profile endorsements including Elon Musk's 'Use Signal' post — a surge Signal's own servers initially struggled to handle. Because there were no shareholders to answer to and no acquirer to sell to, that trust dividend accrued entirely to a structure that could not repeat WhatsApp's history.

where it breaks

This mechanism depends on the founder or funder actually having enough capital to make the nonprofit self-sustaining without needing future outside investment that could reintroduce the same pressure through the back door — Acton's roughly $105 million loan gave Signal years of runway, but a comparable commitment without comparable resources risks the foundation eventually needing donor or grant funding with its own strings attached. It also depends on the underlying product or mission genuinely being compatible with a no-profit-motive structure long-term; a business whose growth or survival requires the kind of capital only equity investors typically provide (heavy infrastructure, expensive R&D at scale) may find the nonprofit structure that protects its values also caps its ability to compete or grow. And converting to a nonprofit doesn't eliminate operational pressure entirely — as the TechCrunch source notes, Acton himself signaled an intent to make the Foundation 'financially self-sustaining' through mission-aligned offerings, meaning even a shareholder-less structure still has to solve its own funding problem, just without the specific failure mode (an acquirer redirecting the mission) that this structure was built to foreclose.

what came after

The Signal Foundation is regularly cited in tech-policy and philanthropy writing as a rare case of a widely-used consumer product deliberately converting away from the venture-funded, acquisition-track path at the height of its relevance, and is referenced as a model for other privacy- or mission-sensitive technology projects (encrypted email, open-source infrastructure) considering nonprofit or foundation structures to insulate themselves from the same pressure.

references

1. [1]Signal expands into the Signal Foundation with $50M from WhatsApp co-founder Brian ActonTechCrunch, 2018techcrunch.com
2. [2]Taking Back Our PrivacyThe New Yorker, 2020newyorker.com

keep it

same kind of clever

• 1970 · AldiAldi didn't hire staff to chase abandoned shopping carts across the parking lot — it made getting a quarter back the customer's own problem to solve.
• 1999 · BBK Electronics (步步高, Duan Yongping)Rather than run three growing product lines as divisions that would eventually compete for the same budget and shelf space, Duan Yongping split them into fully separate companies — two of which, OPPO and vivo, are now each other's biggest rivals.
• 1995 · City of Bogotá (Mayor Antanas Mockus)Bogotá answered jaywalking and reckless driving with mimes instead of more tickets