← Blog
Privacy philosophy5 min read

Privacy by default — and why opt-in privacy isn't enough

Privacy controls hidden behind a toggle protect almost no one. Privacy by default is a design discipline — here is what it changes.

Try it in one click.

Three private surfaces. Same zero-knowledge architecture.

Why defaults decide outcomes Most users never change a default setting. That is not a failure of users — it is a feature of how products are actually used. If privacy depends on a toggle buried in a settings menu, it protects only the few people who knew it was there.

Privacy by default means the protective setting is the one you get without doing anything. It is not a feature you enable; it is the state the system starts in.

What "by default" requires - Encryption is on for every file, in every vault, every time. - Sharing is restricted by default; broad sharing requires an explicit action. - Telemetry on file contents is off — there is none to turn off. - AI features on content do not exist server-side; there is no setting to opt into.

Why opt-in privacy is structurally weak Opt-in privacy keeps the architectural risk in place for everyone who never opts in. It protects the informed minority and leaves the rest exposed. It also lets providers describe themselves as "privacy-respecting" while serving most users from a model that is not.

DRIVUNO's default At DRIVUNO, there is no privacy toggle. Zero-knowledge encryption is the only mode. Every file, every vault, every share, every account — same architecture, same guarantees, every time.

What "default" really means A toggle in settings that nobody finds is not a default. A "private mode" you enable manually is not a default. A default is the state the product ships in, before any user action. Most cloud privacy features are off by default — even when the marketing implies otherwise.

DRIVUNO's defaults Encryption before upload: on. Zero-knowledge architecture: on. Recipient-keyed sharing: on. Server-side AI scanning of your files: not built — there is no plaintext to scan. View-once and expiry: one click. There is no "less private mode" to fall into.

Why defaults matter more than features Users overwhelmingly use defaults. A privacy product whose defaults are weak is a marketing product. A privacy product whose defaults are the strongest setting is an actual privacy product.

Try it in one click.

Three private surfaces. Same zero-knowledge architecture.

Encrypted on your device · upload in 1 click
Upload