Bottom line: this paper says WhatsApp does what it needs to do. I switched to WhatsApp and Line when a WeChat update (WeChat is used by all my Chinese friends and colleagues) required access to heart data from my wearable. At least it asked permission. I said no.