Sunbird's iMessage-for-Android App Returns After 2023 Privacy Breach

Sunbird's iMessage app for Android is back on the Google Play Store, roughly three years after the company pulled it following a privacy failure that exposed hundreds of thousands of user files (Engadget).
Sunbird is an Android app that lets users join iPhone text conversations and group chats. It works by routing an Android device through a remote server that registers with an Apple ID. Apple's network then treats that connection as if it were a legitimate Mac, allowing the Android phone to send and receive iMessages as though it were native Apple hardware (Engadget).
The first launch in 2023 was short-lived. Users found vulnerabilities in the app's encryption that could be exploited to read private messages. The publication 9to5Google showed how serious the flaw was by accessing over 630,000 files through those same vulnerabilities (Engadget). Sunbird shut the app down shortly after.
The relaunch arrives when the technical case for Sunbird's existence is less clear than it was three years ago. Apple adopted the Rich Communications Services protocol in 2024, giving Android and iPhone users a substantially better cross-platform messaging experience than the old SMS fallback. RCS on iOS delivers read receipts, typing indicators, higher-resolution media, and improved group messaging between platforms. It does not, however, deliver full feature parity with iMessage. iMessage maintains end-to-end encryption, meaning only the sender and recipient can read message contents, which RCS does not currently match for cross-platform traffic. The blue-bubble versus green-bubble distinction also persists as a social signal.
Sunbird is leaning into that social gap. The company cites a survey claiming 30 percent of Android users have considered switching to an iPhone over pressure and mockery, and that nearly a quarter of iPhone users would not date an Android user (Engadget). Whether those figures hold up to scrutiny is another matter, but Sunbird's marketing makes clear the company sees social friction, not just feature gaps, as its core market.
The relaunched app is free to install but costs $3 per month or $24 per year, with a 14-day free trial (Engadget). Sunbird has also promised future integration with WhatsApp and Facebook Messenger, plus forthcoming AI tools for the app. The company's website states that WhatsApp and Facebook Messenger integration is planned for Q3 2026 (Sunbird).
The architecture is worth pausing on. Sunbird's approach routes Android-originated messages through a remote server that impersonates a Mac to Apple's authentication infrastructure. This is fundamentally a man-in-the-middle design, where a third party sits between you and the person you are messaging. The 2023 breach was not a peripheral bug; it was a direct consequence of passing sensitive message contents through infrastructure the company did not adequately secure. Any user considering the relaunched product is placing trust in Sunbird's claim that it has fixed the encryption failures that exposed 630,000 files last time. Based on available reporting, the company has not detailed what specific architectural changes were made between the 2023 shutdown and the 2026 relaunch.
That information gap matters. A subscription product handling end-to-end encrypted traffic through a third-party relay server is a high-trust proposition. Users are paying for convenience and social integration while accepting that their messages transit infrastructure that has already suffered a catastrophic breach. The $3 monthly price is low enough to feel casual, but the security exposure is not.
Sunbird's roadmap beyond iMessage also changes the risk surface. Adding WhatsApp and Facebook Messenger integration would expand the app from a single-protocol relay into a multi-platform aggregator, each with its own authentication and encryption model. More protocols mean more attack surface. The promised AI tools add another layer, potentially involving message processing on Sunbird's servers rather than purely relaying encrypted payloads.
The competitive landscape has shifted since 2023 in ways that cut both directions for Sunbird. Apple's RCS support reduces the functional gap between Android and iOS messaging, which could limit the pool of users motivated enough to pay for a third-party bridge. But RCS has not eliminated the social-signaling dimension of iMessage, and Sunbird's own survey data, whatever its provenance, suggests that social pressure remains a real driver of consumer behavior.
The relaunch is, in practical terms, a bet that enough Android users value blue-bubble parity enough to pay for it and to trust a company with a serious breach in its recent history. Sunbird has set Q3 2026 as its target for expanding beyond iMessage. Whether the company can execute on that roadmap while maintaining the security of a multi-protocol relay architecture is the open question that will determine whether this second attempt outlasts the first.


