Signal

Signal's interface argument is restraint. It looks like an ordinary chat app on purpose, because its whole thesis is that strong encryption should require no user effort and surface no jargon. The signature touches are quiet ones: disappearing-message timers set per conversation, a safety-number screen for verifying a contact's keys, and registration locks that live where most apps put nothing. There is no ad surface, no algorithmic feed, no cloud backup nagging, which keeps the screen calm but also means a lost phone can mean lost history. Read receipts and typing indicators exist but ship as choices you can switch off wholesale. The result reads as the anti-Messenger: every expressive flourish the others chase is deliberately absent, so the design says privacy by saying almost nothing.