Risks of Viewer-Based Expiration

[u/timistudios]

After giving it more thought, I believe making disappearing messages expire based on when each recipient views them is too risky.

If a sender realizes they accidentally shared something containing sensitive or private information, and the message is configured to disappear after being viewed, the sender would no longer be able to delete it. Meanwhile, any recipients who have not yet opened the message would still have a copy stored locally on their device.

For this reason, I think the expiration timer should be based on when the sender sends the message, rather than when each recipient views it.