Google’s New Update Means Your Boss Can Read Every Text You Send

News about Google updates usually comes and goes without anyone paying much attention, but this one has made people sit up straight.

Getty Images

The idea that your boss could suddenly have access to your texts is enough to make anyone rethink what they type, even on a boring Tuesday morning. It’s sparked a mix of panic, confusion, and a fair bit of disbelief because most people assumed their messages were one of the few private things left on a work phone.

What makes this update so unsettling is how it slipped in without much fanfare. One minute you’re sending harmless messages, the next you’re wondering who else might be able to scroll through them. And while the headlines sound dramatic, there is some context that changes how worried you actually need to be. Before everyone throws their work mobile into the nearest river, it’s worth understanding what’s really going on, and who this update actually affects.

This only affects work-managed phones, not your personal device.

Getty Images/iStockphoto

When you first hear about this update, it sounds like Google’s given every employer in Britain access to everyone’s private messages. The panic online has been massive, with people assuming their personal phones are suddenly being monitored by their bosses without their knowledge.

The feature only works on company-owned or fully managed Android devices that your employer gave you and controls through their IT systems. If you bought your own phone with your own money and never let your company install management software on it, this doesn’t affect you at all. Your personal device and messages remain completely private and encrypted.

It’s called RCS Archival, and it launched in November 2025.

Getty Images/iStockphoto

Most people don’t even know what RCS is, let alone understand why Google’s created a system to archive it. RCS stands for Rich Communication Services, and it’s basically the modern version of texting on Android with features like read receipts, typing indicators, and better photo quality.

Google launched this RCS Archival feature in mid-November 2025 for Pixel phones and other compatible Android devices. The system allows third-party apps approved by your employer to plug directly into Google Messages and save copies of everything you send, receive, edit, or delete. It’s designed for companies that need to keep records of employee communications for legal reasons.

Your messages are encrypted in transit, but not once they’re on your phone.

Getty Images

Loads of people think end-to-end encryption means their messages are completely protected and nobody can ever read them. They assume that if something’s encrypted, it’s locked away forever and employers can’t possibly access the content regardless of what tools they use.

End-to-end encryption only protects your messages while they’re travelling between phones. Once a message arrives on your device, it gets decrypted so you can actually read it, and at that point the archival software can access it too. The encryption keeps your messages safe from being intercepted during transmission, but it can’t protect them from being read on a device your employer controls.

Employers can see when you edit or delete messages, too.

Getty Images

You might think that quickly deleting an embarrassing text or editing a message you sent by mistake makes it disappear completely. Surely, if you’ve removed something from your conversation, there’s no record of it anymore and nobody can see what you originally wrote… or so you think.

The archival system captures everything, including the original versions of messages you’ve edited and texts you’ve deleted. When you edit a message within the 15-minute window Google allows, both versions get saved. If you delete something in a panic, the archived copy remains with a timestamp showing when you removed it. Nothing actually disappears.

You’ll get a notification when archival is active on your device.

Pexels/August De Richelieu

Some workplace monitoring happens secretly without employees knowing they’re being watched. You’d reasonably worry that your employer could turn this feature on without telling you, quietly collecting all your messages while you’re completely unaware it’s happening.

Google requires that employees see a clear notification on their device whenever RCS Archival is active. You’re supposed to know your messages are being archived rather than it happening in secret. However, if you’ve already agreed to monitoring in your employment contract or when you accepted the work phone, this notification might just be confirming what you technically already consented to.

It works with third-party apps like CellTrust and Smarsh.

Getty Images

This isn’t Google directly reading your messages and handing them to your boss. The system’s more complicated than that, involving specialised software that most people have never heard of and don’t understand how it works or who makes it.

Google’s partnered with compliance and archiving companies like CellTrust, Smarsh, and 3rd Eye that make software designed for regulated industries. Your employer installs one of these apps on your managed device, and when you send a message, the app gets notified and saves a copy to your company’s records system. More archival providers will likely join in 2026.

This is mainly for regulated industries like finance and healthcare.

Getty Images

You might assume any company can now spy on employees’ texts just for the sake of it. It seems like a massive invasion of privacy that serves no real purpose beyond nosiness and wanting to catch people out for personal conversations.

The feature’s designed for industries with strict legal requirements to keep records of all business communications. Banks, financial services, healthcare providers, and government agencies can get absolutely hammered with fines if they can’t produce employee communications during lawsuits or regulatory audits. Companies in these sectors have been fined over £2 billion for failing to properly archive messages, so this solves a genuine compliance problem.

However, any company with managed devices could use it.

Getty Images

Just because it’s designed for regulated industries doesn’t mean it’s limited to them. Once the technology exists and is easy to implement, there’s nothing stopping regular companies from using it, even if they’re not legally required to archive communications.

Any organisation that gives employees managed Android phones can enable this feature if they want. Your local marketing agency, retail chain, or logistics company could decide to archive all messages sent on work devices, even though they’re not in a regulated industry. The tools are available to anyone using Android Enterprise device management, not just banks and hospitals.

It captures SMS and MMS messages too, not just RCS.

Liubomyr Vorona

You might think you can avoid this by switching from RCS back to regular text messages. Surely, if you just use old-school SMS instead of the fancy new messaging features, you can dodge the archival system and keep your conversations private, right? Wrong.

The system archives traditional SMS and MMS messages as well as RCS chats. Switching to basic texting won’t help you avoid monitoring if your employer’s enabled archival on your device. The feature’s backward compatible with older messaging formats, so every text you send through Google Messages gets captured regardless of what type of message it technically is.

This is pushing people toward using WhatsApp and Signal at work.

Getty Images

Employees who need privacy have long used apps like WhatsApp, Signal, or Telegram to chat with colleagues about sensitive topics. These conversations happen outside official work systems, creating what IT departments call shadow IT, where important business discussions aren’t properly recorded.

This update will probably make the shadow IT problem worse rather than better. More people will switch to encrypted messaging apps that can’t be archived, taking work conversations onto platforms their employers can’t monitor or access. While companies want to capture all business communications, employees will just move to apps that protect their privacy properly.

Your consent is technically required, but refusing might cost you your job.

Unsplash+/Getty

Legally, employers need your consent before they can monitor your communications. That sounds protective, like you’ve got a choice in whether your messages get archived, and you can refuse if you’re uncomfortable with being monitored constantly.

In reality, your consent is probably buried in your employment contract or in the agreement you signed when you accepted the company phone. If you refuse to consent when asked directly, you’ll likely be told you can’t have a work phone anymore or even that it’s a condition of continued employment. It’s technically consent, but not really a free choice.

Messages between you and colleagues are both captured.

Pexels

You might think that if you’re careful about what you send, you’re protected. You assume that as long as you only text appropriate work stuff from your company phone, surely there’s nothing to worry about because you’re not doing anything wrong anyway, but that’s not the case.

The problem is that you can’t control what other people send to you. If a colleague texts you something inappropriate, that message gets archived in your records even though you didn’t send it. If someone shares gossip, complains about management, or sends something dodgy, it’s saved under your name because it appeared on your device. You’re accountable for conversations you didn’t start.

This could spread to Samsung and other Android manufacturers.

Unsplash+

Right now, this is specifically a Google Pixel feature, so you might think you’re safe if you’ve got a Samsung, OnePlus, or other Android work phone. Assuming that Google’s update doesn’t affect devices made by other manufacturers, and that switching brands would solve the problem, isn’t technically true.

Google says the feature works on Pixel and other compatible Android Enterprise devices, which suggests it’s not just Pixels. As RCS becomes standard across all Android phones and archival becomes normal in business environments, expect Samsung and other manufacturers to implement similar features. If there’s demand from enterprise customers, everyone will offer it.

Keep absolutely everything personal on a separate device.

Unsplash/Linkedin Sales

The advice has always been to keep work and personal separate, but loads of people use their work phone for personal stuff because carrying two devices is annoying. It seems excessive to have two phones when your work phone can do everything, and surely a few personal texts won’t matter.

However, now more than ever, you need a completely separate personal phone for anything you don’t want your employer to see. Don’t text your partner, don’t message your mates about work complaints, don’t search for new jobs, and don’t have any personal conversations on your work device. Assume everything on that phone is being read and saved because it probably is.