Is an NDA actually worth anything in business?
Yes, in specific circumstances — and considerably less than the people insisting on one usually believe, particularly when the thing being protected is an idea.
What an NDA does. Creates a contractual obligation not to disclose or misuse defined confidential information, with a remedy if breached. It also puts the recipient on notice that the information is confidential, which matters independently.
Where it genuinely works: commercial negotiations where real information is exchanged — financials, customer lists, pricing, technical specifications; due diligence; supplier and manufacturing relationships, where designs and processes must be shared; employment and contractor relationships; and anything where the information has identifiable, demonstrable value.
Why it does less than founders hope:
Ideas are not protectable. An NDA covers information, not concepts. "An app that does X" is not confidential information with value — and the practical reality is that execution matters far more than the idea, which is why experienced people are unimpressed by secrecy about one.
Investors generally will not sign. Almost no venture investor signs an NDA to hear a pitch. They see many similar companies and cannot accept contractual restrictions across a whole sector. Insisting on one signals inexperience and usually ends the conversation. Withhold genuinely sensitive detail instead and share it during diligence, where NDAs are normal.
Enforcement is difficult and expensive. You must prove the information was confidential, that it was disclosed or used, and that you suffered loss. Proving where a competitor's idea came from is genuinely hard.
The damage may already be done by the time you find out, and damages rarely restore a lost advantage.
Overly broad NDAs are less enforceable, not more, so "everything we discuss forever" is weaker than a tight definition.
Also note: NDAs cannot lawfully prevent protected disclosures — whistleblowing — or reporting a crime, and their misuse to silence misconduct has attracted significant regulatory and legislative attention.
What to check: a precise definition of confidential information; standard carve-outs for information already public or independently developed; a sensible duration; and who else the recipient may share it with.
General information, not legal advice.