Proof of Coverage Media
May 21, 2025

The World’s First Truly Private Messaging App with Session | Kee Jefferys + Chris McCabe

Kee Jefferys and Chris McCabe from Session dive into how their truly private messaging app is challenging the giants by building a communication platform where trust isn't a prerequisite, powered by a decentralized network and a carefully designed token economy. Session’s core team, including Jefferys and McCabe, are pioneering a future where users, not platforms, control their data.

The Unseen Cost of "Free" Messaging & Session's "Can't Be Evil" Fix

  • "What I love about what we did... it's allowed us to deliver a product where you can use Session you don't have to trust the platform. We have no access to your data... we actually do not have the data. There is no data to hand over."
  • "It's fundamentally a much more secure approach by just never having the data in the first place to then sell, lose or leak."
  • Session was born from a deep dissatisfaction with the trust model of existing messaging apps, where user data is often the product.
  • Their "can't be evil" philosophy is baked into the architecture: Session physically doesn't hold user messages, making data breaches or forced handovers impossible. This was highlighted when Session became a lifeline in Iran during government communication blackouts, gaining 500,000 users as other apps requiring phone numbers failed.

Under the Hood: DePIN, Crypto Keys, and Onion Routers

  • "Session completely circumvents all of that by not using a phone number and just generating a key on the device and then you can start using session."
  • "Session uses onion routing... we have this DePIN network of 2200 nodes and that's the network that's actually doing the onion routing."
  • Users create accounts by generating a public-private key pair directly on their device—no phone number needed, sidestepping SMS verification vulnerabilities and SIM-swapping risks.
  • Messages are encrypted and routed through Session’s proprietary DePIN (Decentralized Physical Infrastructure Network) of over 2,200 nodes using an onion routing protocol, obscuring IP addresses and metadata. Messages are only stored temporarily (14 days) and never on-chain.

The Session Token: Fueling Decentralization and Growth

  • "Session token... that's like the incentive layer behind the entire Session network that will be launched on the Arbitrum blockchain."
  • "It is the reason that... we have a successful application."
  • The Session token, transitioning to the Arbitrum blockchain, is integral to the network. It incentivizes the 2,200+ community-run nodes that store and route messages.
  • Node operators must stake Session tokens, aligning their interests with network health and performance, a model distinct from volunteer-run networks like Tor. Future premium features, monetizing ~3% of users, will feed rewards back to these node operators, creating a sustainable flywheel.

Growing a Privacy Fortress: Organic Traction

  • "We've really focused on organic growth and just really focusing on a product that is better and offers a better value proposition than competitors."
  • "Session is growing because people want privacy they actually want to use the application they're not just using session because you... you're adding some arbitrary points."
  • Session has organically grown to over one million monthly active users (MAUs) pre-token launch, primarily because users genuinely seek privacy, not airdrops. The US leads with 300,000 MAUs.
  • This privacy-first approach means forgoing detailed analytics, forcing the team to rely on direct user feedback and community engagement—a more "rudimentary" but perhaps more authentic way to build.

Key Takeaways:

  • Session isn't just another messaging app; it's a statement on data ownership and a masterclass in building a decentralized ecosystem where the token isn't an afterthought but the engine. They're proving that real utility, not hype, attracts and retains users.
  • True Privacy is Priceless (and Achievable): Session demonstrates that "can't be evil" isn't just a slogan; it's an architectural choice that eliminates data honeypots.
  • Tokens Can Power Real Infrastructure: The Session token is vital for its DePIN, incentivizing a robust, decentralized network crucial for private communication.
  • Organic Growth Signals Real Demand: Achieving 1M+ MAUs without token-based growth hacks validates a strong product-market fit for privacy-centric applications.

For further insights and detailed discussions, watch the podcast here: Link

This episode unpacks Session, a decentralized messaging app, revealing how its privacy-first architecture and token-incentivized DePIN network offer a blueprint for secure communication, with significant implications for data sovereignty in the crypto and AI landscape.

Session Token's Legion Sale and Community Engagement

  • Chris McCabe initiated the discussion by confirming the Session token's community sale on the Legion platform was progressing well, having met its base funding target with a few days remaining at the time of recording.
  • Kee Jefferys highlighted the sale as a valuable opportunity to engage with new crypto-centric communities, noting that while Session has a broad global user base, many are unaware of the underlying cryptocurrency that powers the network.
  • Kee Jefferys stated, "Legion's a really good kind of crypto focused community that we've been able to kind of get intro to and and get people interested via the Legion platform."
  • Strategic Implication for Crypto AI Investors: Successful community funding rounds for DePIN projects like Session signal investor appetite for infrastructure plays. The ability to tap into specific crypto communities is crucial for bootstrapping network effects and token distribution, a model applicable to decentralized AI infrastructure projects.

The Genesis of Session: A Quest for True Communication Privacy

  • Kee Jefferys explained that his dissatisfaction with the prevailing trust models in centralized messaging apps, where user data is often stored on vulnerable central servers, was a primary motivator for creating Session.
  • The core inspiration was to build a communication platform where users do not have to trust the platform itself with their data, addressing the pervasive fear of data breaches.
  • DePIN (Decentralized Physical Infrastructure Network) is a network of real-world hardware (like servers or storage) coordinated by blockchain and crypto-economic incentives. Session utilizes a DePIN for its messaging infrastructure.
  • Kee Jefferys, articulating the core value proposition, emphasized, "We have no access to your data as an individual... even if we were... forced at gunpoint to hand over someone's data we actually do not have the data. There is no data to hand over."
  • Actionable Insight for Crypto AI Researchers: Session's approach to data minimization is a critical principle for AI systems handling sensitive information. Research into DePINs can explore how such trustless architectures can be adapted for secure AI model training and inference, preventing data honeypots.

Architecting for Trustlessness: Session's "Can't Be Evil" Design

  • Session's design philosophy moves beyond "don't be evil" to "can't be evil," meaning the system is architecturally incapable of accessing or compromising user data.
  • Messages sent on Session are onion-routed through a swarm of decentralized nodes and stored temporarily (14 days) in an encrypted state, ensuring no single entity, including Session developers, can read or surrender them.
  • This approach fundamentally enhances security by eliminating the central point of failure and data aggregation common in traditional messaging apps.
  • Actionable Insight for Crypto AI Investors: Investing in platforms with "can't be evil" designs offers a hedge against regulatory overreach and data misuse scandals. For AI, this translates to backing infrastructure that inherently protects user privacy and model integrity, a growing market differentiator.

Real-World Imperatives: Why Secure Messaging is Non-Negotiable

  • Chris McCabe referenced a recent "Trump signal gate" incident involving alleged sharing of sensitive information in a Signal group, suggesting Session's explicit contact confirmation process could mitigate such risks by preventing accidental additions.
  • Kee Jefferys provided a compelling example from Iran, where government suppression of SMS-based verification codes blocked access to apps like Telegram, WhatsApp, and Signal. Session, not requiring a phone number, saw a surge of over half a million users in two weeks during this period.
  • Kee Jefferys noted, "Session cuts straight through that because you don't need a phone number and it's permissionless and it's like a self-sovereign application."
  • Strategic Implication for Crypto AI Researchers: The Iran example underscores the resilience of permissionless systems. AI researchers should consider how decentralized identity and access mechanisms can ensure AI tools remain available and uncensored, especially in restrictive environments.

Decentralized Identity: Key Generation Beyond Phone Numbers

  • Kee Jefferys detailed how Session enables account creation without phone numbers by using on-device public-private key pair generation. This cryptographic method, common in cryptocurrency wallets, assigns a unique public key (like an address for receiving messages) and a corresponding private key (for signing messages and decrypting received ones) to the user.
  • This means users can communicate by sharing their public keys, bypassing centralized directories and the vulnerabilities associated with phone number-based identity. Users can also rotate accounts frequently for enhanced anonymity.
  • Actionable Insight for Crypto AI Investors: Decentralized identity solutions are foundational for Web3 and have implications for AI user authentication and data ownership. Projects that successfully abstract this complexity for users, like Session, are well-positioned for adoption and can inform how AI systems manage user credentials securely.

The Role of Blockchain: Incentivizing Session's DePIN Network

  • Kee Jefferys clarified that while the cryptographic key pairs are standard technology, the blockchain (specifically Arbitrum, an Ethereum Layer 2 scaling solution) underpins Session's incentive layer.
  • The Session token, to be launched on Arbitrum, rewards the 2,200+ node operators in the DePIN network for storing and routing encrypted user messages. These operators must also stake Session tokens to participate.
  • Crucially, user messages are not stored on the blockchain itself, preserving scalability and privacy. Kee Jefferys stated, "Messaging onchain, I think a few other projects have done that. And we from the get-go, we always thought that was a bad idea."
  • Strategic Implication for Crypto AI Investors: The separation of application logic (messaging) from incentive mechanisms (blockchain) is a key architectural pattern for scalable DePINs. AI projects requiring decentralized compute or storage can learn from this model to incentivize resource providers effectively without compromising core functionality or privacy.

Organic Growth and User Acquisition: A Privacy-First Approach

  • Kee Jefferys emphasized Session's reliance on organic growth, driven by a superior product offering genuine privacy, rather than paid advertising or an exclusive focus on the crypto niche.
  • Strong SEO for the term "session" and positive coverage from tech news outlets during events like WhatsApp policy changes have significantly boosted user acquisition.
  • Chris McCabe, offering a pragmatic perspective on sustainable growth, added that Session has deliberately avoided airdrops or points programs to attract users. He said, "We have a very good understanding that session is growing because people want privacy they actually want to use the application."
  • Actionable Insight for Crypto AI Researchers: Sustainable growth for decentralized applications, including AI tools, often comes from solving real user problems rather than short-term incentive schemes. Focusing on core value propositions like privacy or unique AI capabilities can build a more resilient user base.

Navigating Network Effects and User Onboarding

  • Chris McCabe acknowledged the challenge of network effects: users need their contacts on Session to communicate. He contrasted Session's approach with apps that auto-import phone contacts, which many find intrusive.
  • Session is exploring deep links as a consent-based method for users to easily invite contacts. A deep link is a URL that directs users to a specific location within an app after installation, streamlining the onboarding process.
  • Kee Jefferys mentioned a strategy of focusing marketing efforts on specific regions, like the US (their largest market with approximately 300,000 Monthly Active Users) and Western Europe, to build localized network density.
  • Strategic Implication for Crypto AI Investors: Overcoming the "cold start" problem is critical for network-dependent applications. For decentralized AI platforms, strategies that foster localized adoption or target specific developer/researcher communities could accelerate network effects.

Building in the Dark: Product Development with Minimal Analytics

  • Chris McCabe explained that Session, due to its privacy-first stance, does not embed typical analytics tools (e.g., Google Analytics) that track user behavior in detail. This means they lack granular data on user flows or A/B testing results.
  • This forces the team to rely on more direct methods like user surveys, interviews, and active engagement with their communities to understand user needs and pain points.
  • They are considering a self-built, anonymized, opt-in analytics system, potentially using onion routing for data submission, possibly with token incentives for users who opt-in. Kee Jefferys supported this, stating, "I think consent is super important."
  • Actionable Insight for Crypto AI Researchers: Developing AI applications with a strong privacy ethos may require alternative feedback mechanisms. Exploring privacy-preserving analytics or federated learning approaches where data remains on user devices could be vital for ethical AI development.

Under the Hood: Onion Routing on Session's DePIN

  • Kee Jefferys, drawing on his technical expertise, provided a detailed explanation of onion routing, a technique used to enhance anonymity by encrypting and relaying communications through a series of network nodes. It's similar in principle to Tor but uses Session's dedicated DePIN network of 2,200 nodes.
  • In Session, a message path involves three hops. The first node knows the sender's IP but not the final destination; the middle node knows only the previous and next hop; the exit node knows the destination (or where the message is deposited) but not the original sender. This splits metadata, protecting user IP addresses.
  • Kee Jefferys stated, "It's really just to like hide people's IP addresses, reduce the metadata that the network gets access to, which is something that Telegram and Signal and WhatsApp don't do."
  • Strategic Implication for Crypto AI Investors: DePINs employing sophisticated privacy techniques like onion routing offer robust infrastructure for applications requiring high degrees of confidentiality. This is particularly relevant for AI applications handling sensitive personal or proprietary data, where metadata leakage can be a significant risk.

The Session Token: Fueling a Sustainable Decentralized Ecosystem

  • Kee Jefferys clarified that Session is transitioning an existing token to the new Session token on Arbitrum (an EVM-compatible chain, meaning it works with Ethereum's tools and standards), which was planned for the month following the podcast recording.
  • The token's primary utility is to incentivize the DePIN: node operators stake tokens and earn rewards for providing storage and routing. Future plans include premium features for power users, with revenue generated feeding back into the node reward pool, creating a sustainable "bullish flywheel."
  • Chris McCabe emphasized the token is not an afterthought but integral to Session's decentralized architecture. "It is the reason that you know we have a successful application," he said, highlighting how token incentives ensure network reliability and Sybil resistance, unlike purely volunteer networks.
  • Actionable Insight for Crypto AI Investors & Researchers: The Session token model demonstrates how crypto-economics can sustain decentralized infrastructure critical for AI. Researchers can study such models for incentivizing decentralized compute, data provision, or model validation for AI systems, while investors can look for projects with well-designed, value-accruing tokenomics that support long-term network health.

Reflective and Strategic Conclusion

Session's journey illustrates how DePINs, powered by robust tokenomics and a privacy-first ethos, can build resilient, user-centric applications. Crypto AI investors and researchers should monitor such DePINs for insights into decentralized infrastructure development and data sovereignty solutions applicable to the AI domain.

Others You May Like