Samsung says it's aware of reports from some phone owners that its Messages texting app randomly sent photos to their contacts without permission
Sending pictures to others is one of the most basic functions of a smartphone, but when your phone's texting app starts randomly pushing …
Context & Ripple Effects
A phone's default texting app failing is worse than a third-party app failing, because users never chose it. The incident lands in a stretch of messaging-infrastructure failures: two years later, carriers delivered months-old text messages overnight across every major US network, and Go SMS Pro was caught exposing private photos and videos from an app with 100M+ installs.
Samsung's response arc runs through the same corpus: rather than keep hardening its in-house app, it adopted Google Messages as the US default starting with the Galaxy S22 series (the Google Messages switch), and layered on Message Guard for image-attachment malware on the S23. This 2018 photo-sending bug is an early data point in why.
First-order effects
- Affected Galaxy owners had private photos pushed to contacts without consent — a direct privacy breach through the app they cannot easily remove — while Samsung faces an immediate support and patching burden on its flagship software surface.
Second-order effects
- Every unforced error in Samsung's first-party messaging stack strengthens the case for ceding the default to Google's RCS app, which is exactly where the company landed by 2022 — shifting messaging responsibility (and data flow) from Samsung to Google.
Third-order effects
- If the pattern holds, handset makers stop competing on bundled messaging apps and compete instead on security layers around whatever platform app ships by default — Message Guard-style attachment scanning becoming the differentiator, with regulators likely to treat unsolicited photo transmission as a reportable privacy defect rather than a glitch.
The trend: Phone makers are retreating from first-party messaging apps toward hardened platform defaults, with attachment-level security features replacing app ownership as the trust battleground.