“When private WhatsApp messages or personal phone records are pulled into a legal dispute, the primary risk to trade secrets is a complete loss of data sovereignty,” said Martin Nygate, founder and CEO at Velox Networks, a licensed telecommunications service provider in Singapore. “The immediate danger with consumer messaging apps is their informality. A single WhatsApp thread often mixes casual chatter with highly sensitive proprietary data or internal strategies that would never appear in official documents. During the discovery process, these threads are frequently exposed in their entirety, shifting context and potentially leaking unrelated confidential matters into the court record.”
“Furthermore, legally protecting a trade secret requires a firm to prove it made a demonstrable effort to keep that information secure. Allowing staff to scatter sensitive data across unmanaged personal apps actively weakens this legal defence. This vulnerability extends beyond text to voice. If a legal conflict hinges on a verbal exchange regarding confidential information, personal mobiles offer no centralized call recording, leaving the firm with no verifiable audit trail. This risk compounds when an employee leaves the firm. Because call histories, client contacts and informal agreements live entirely across their personal mobiles and personal communication apps, the departing employee walks away with the only record of those relationships and agreements. The firm loses its data custody, stripping it of the exact records it might need to protect its trade secrets and confidential information in a dispute.”
For protection, Nygate said, the most effective step an organization can take is mandating that all sensitive discussions occur exclusively on enterprise-managed platforms.
“The core risk is not necessarily the physical personal mobile, but the unmanaged personal communication apps installed on them,” he noted. “To prevent departing staff from walking away with corporate data, companies must deploy secure enterprise applications directly onto these devices. This separates professional and personal data, making oversight and auditing far simpler.”
“For voice communications, modern cloud-based business phone systems (VoIP) can be installed as secure apps on an employee’s mobile. This ensures call data, contact histories and centralized recordings stay encrypted within the company,” he explained. “Beyond offering better call quality and security, these enterprise call applications resolve the fundamental issue of data ownership: if an employee leaves, they do not walk away with critical business records.”
“For messaging, companies must replace consumer apps with centrally managed alternatives. If clients demand WhatsApp for convenience, organizations should deploy WhatsApp Business accounts registered strictly to company-owned numbers and emails. This keeps chat histories under corporate control, ensuring they can be audited or revoked.”
Ultimately, these technologies must be backed by strict internal policies and training, Nygate said. “By routing communications into secure, auditable channels, organizations lock down their trade secrets while giving their teams a simpler environment to manage client confidentiality.”
If found guilty, however, companies may face significant legal consequences. “Once litigation is underway, or even reasonably anticipated, a strict legal duty to preserve relevant material immediately applies to both text messages and voice communications. Courts across Asia and globally have upheld these principles. If a company fails to preserve this data because it was scattered across personal devices, courts can draw adverse inferences, essentially assuming the deleted information was harmful to the company’s case. Beyond crippling the company's legal position and risking heavy judicial sanctions, the individual lawyer may also face serious professional disciplinary action,” he said.
“The core issue is that personal devices and consumer apps make legal preservation incredibly difficult,” he added. “When trade secrets are discussed off-channel, vital evidence can easily vanish through routine device resets, disappearing-message settings, or simply a lost phone. Because the firm lacks a central mechanism to capture this data, they cannot control it. Crucially, explaining to a judge that a consumer app automatically deleted a thread offers no legal protection once the duty to preserve has arisen.”
To avoid these liabilities, organizations must ensure their teams use enterprise-managed platforms for all communications, Nygate said. “When voice calls and text messages are routed through secure corporate channels, logging and data retention occur automatically. This creates a central repository that can be instantly placed on legal hold, ensuring that both call histories and text threads are preserved intact. By replacing fragile personal records with a robust, auditable system, companies protect themselves from sanctions while safely meeting their disclosure requirements.”
- Excel V. Dyquiangco
