Cape wants your phone to forget you

The first thing to understand about Cape is that a perfectly ordinary phone call has two audiences. One hears your voice. The other handles the connection. Even when the conversation is private, the machinery arranging it can learn something about you: a time, a destination, a place. Your phone is an industrious little clerk.

Cape sells a subscription built around making that clerk less inquisitive. Its wager is that people will pay for a network designed to collect less, retain less and make persistent tracking more difficult.

A better lock on the wrong door

John Doyle’s interest began at Palantir, where he encountered cellular vulnerabilities affecting government organizations and ordinary people. Cape started in 2022 with a diagnosis: securing the handset leaves an enormous system outside it. A VPN and an encrypted messenger help, but neither gives the subscriber authority over the carrier’s records. Doyle’s founding account makes that missing authority the business opportunity.

A carrier’s mobile core authenticates subscribers, routes traffic and applies network policies. Cape built its own cloud-based core and controls its SIM infrastructure while renting physical radio access. In telecom language, it is a “heavy” mobile virtual network operator. In practical language, it chose to own the part of the business that decides what gets remembered. That separates its proposition from a cheaper plan with a new name on the bill.

The friends-and-family problem

Infrastructure ownership sounds rather noble until somebody asks to check their voicemail. Early Cape service lacked voicemail and international roaming. Doyle acknowledged that even friends and family hesitated. “My own friends and family hesitated to sign up,” he wrote in the January 2026 launch post. Privacy had collided with the unglamorous expectation that a phone should behave like a phone.

The team added encrypted voicemail and roaming routed through Cape’s core. Public beta opened in March 2025; general availability followed on January 27, 2026. A customer cannot live inside your architectural diagram. The invention must accommodate the habits it hopes to protect.

A different name, every morning

Consider Identifier Rotation. A SIM normally carries a persistent subscriber identifier, the IMSI, distinct from your familiar phone number. Cape changes that identifier every 24 hours on supported devices, with an on-demand option. Your contacts can still call you. Someone trying to stitch together your network history has a less cooperative thread.

This feature first belonged to Obscura, Cape’s offering for highly targeted individuals; community interest helped bring it to more subscribers in December 2025. Cape’s own technical explanation includes an essential qualification: tower operators can see other identifiers, including the device’s IMEI. Rotation makes tracking harder. It does not abolish the outside world.

Account security takes a similarly structural approach. Cape uses digital signatures and a 24-word recovery phrase. Support agents cannot simply initiate a number transfer on your behalf. That removes a route an impersonator might exploit, while giving the subscriber a serious housekeeping job: protect the recovery phrase. Cape’s terms say it cannot help if the recovery key is lost.

The audit that spoiled a tidy sentence

Privacy companies are most interesting when their claims meet an unfriendly question. Cape deletes its internal detailed call, text and data records after one day. Partner billing records have a separate 30-day retention window. But its external review exposed a distinction between those records and retained daily usage totals.

Trail of Bits examined the feature in May and July 2026. Cape’s published findings say an internal adversary with the right database access could link supposedly anonymous totals to subscribers. The company introduced deletion of totals older than 60 days and removed its anonymous-storage language.

A deletion promise has to survive contact with the database.

The practical lesson of Cape’s call-log audit

The correction shows where an attractive assumption failed and what changed. Businesses can copy the discipline: distinguish detailed records from aggregates, test who can reconnect them, and give each retention decision a reason. Calling a dataset anonymous does surprisingly little engineering.

Who pays for a shorter memory?

Cape’s customers span privacy-minded consumers, businesses and government organizations. Its business offering adds threat monitoring and line management. The company reports a completed naval pilot in Guam. With the Electronic Frontier Foundation independently vetting applicants, it also offers free service to at-risk journalists and activists. Different budgets, one concern: a phone can expose its owner.

The consumer plan lists $99 monthly, including taxes and fees, with $70-for-life pricing for eligible people joining by December 31, 2026. That is $840 a year at the promotional rate. Unlimited service and privacy features are the subscription product; Cape promises never to sell subscriber data. Its March 2026 financing supplied another $100 million at a $900 million valuation, bringing company-reported total funding to $191 million. Funding supplies runway; subscriber demand must follow.

There is a quieter business lesson here, too. Cape paired network protection with Proton’s application services and supported GrapheneOS. The pieces address different exposures. A carrier cannot repair a location-sharing app merely by improving the network underneath it.

Read the fine print. Occasionally, it has a chalet.

In September 2026, Cape described automatic fallback between two major nationwide networks using one eSIM. Subscribers choose a preference; Cape tries the other network when coverage disappears. The physical connection still matters. So do compatible devices, protected applications and trust in Cape itself.

Perhaps its best invitation to skepticism was a promotion with Proton: a Swiss holiday hidden in the privacy policy. A reader found it after roughly two weeks. The joke works because reading the policy is exactly the habit Cape needs customers to acquire. Before switching carriers, ask what gets collected, who can see it and when it disappears. Even without a chalet, those are excellent questions.