Recently, reports involving Signal highlighted that operating system notification databases may retain sensitive information from message notifications, even after the original messages are deleted. While this example involved Signal and iOS, the same general risk may apply to other apps and operating systems where notification content is stored or indexed outside the app.

For privacy-focused users, Proton Mail and other Proton products should offer an option to use generic notification text instead of exposing message content in system notifications.

For example, instead of showing sender names, subject lines, or message previews, the notification could simply say:

“New Proton Mail message received”

This would reduce the chance that sensitive email metadata or content could later be recovered from operating system notification logs, backups, search indexes, forensic tools, or other third-party access.

Suggested feature: Generic Notification Mode

Proposed options:

Show full notification preview
Show sender only
Show generic notification only
Disable notifications entirely

This would be a valuable privacy enhancement for Proton Mail, Proton Calendar, Proton Drive, Proton Pass, and other Proton apps where notifications may reveal sensitive content.