ProtonMail vs Gmail: Email Privacy Compared

ProtonMail vs Gmail

The difference is architectural rather than a matter of policy. Google can read your mail and promises to use that ability narrowly; Proton has arranged its systems so that it cannot.

Zero-Access Encryption

Proton stores messages encrypted with keys derived from your password, which the server never holds in usable form. A legal demand, an insider or a database breach yields ciphertext. Google encrypts mail at rest with keys it manages, so it can decrypt to power search, spam filtering, smart replies and any future feature, and it can decrypt in response to lawful process. This is the whole comparison in one paragraph; everything else follows from it.

What Google Actually Does With Your Mail

Google stopped scanning consumer Gmail content for advertising personalisation in 2017, and repeating the claim that it reads your mail to sell ads is out of date. It still processes content to provide features, and the metadata is untouched by that change: who you correspond with, how often, subject lines, attachments and delivery times all remain available and are joined to the rest of your Google account. Smart features can be disabled in settings, which reduces processing but not capability.

What Proton Cannot Do For You

End-to-end encryption applies between Proton users automatically, and to external correspondents only if they use PGP or you send a password-protected message. Mail to an ordinary recipient at an ordinary provider is encrypted in transit and stored encrypted on Proton's side, but the recipient's provider sees it in the clear. Email's envelope, the sender, recipient, timestamp and usually the subject, traverses the network in a readable form no provider can fix, because the protocol was not designed for confidentiality. Anyone who needs metadata protection needs a messenger, not a mailbox.

Jurisdiction

Proton is Swiss, which imposes meaningful procedural requirements on data demands and no gag-order regime comparable to some others, and Proton publishes a transparency report. Swiss law has still compelled Proton to log connection metadata for a specific account under a valid order, which the company disclosed, and that case is the clearest available illustration of the boundary: the content stayed encrypted, the metadata did not. Google is subject to US legal process, including mechanisms with limited notice to the account holder.

Features And Cost

Gmail wins on search, spam filtering, storage in the free tier, interface speed and integration with calendars, documents and everything else in the ecosystem. Its spam filtering in particular benefits from a scale nobody else has. Proton's search is weaker precisely because the server cannot read the mail, which is the guarantee working as intended rather than a defect. Proton bundles a calendar, drive, VPN and password manager, and its apps are open-source and independently audited.

The Migration Point That Matters Most

Register your own domain and use it on whichever provider you choose. Otherwise you have swapped one lock-in for another, and moving again means telling everyone a new address. With a domain you control, changing provider is a DNS update.

Verdict

If your mail contains anything you would not want disclosed by a subpoena, a breach or a policy change, the architectural difference is decisive. If your priority is search, storage and integration, Gmail is a better product, and turning off smart features plus using aliases captures a meaningful part of the benefit without moving.