At this point it’s best to assume that everything you communicate is being collected in some way.

There are very, very few apps I really trust. E.g. the only mechanism I trust for communicating passwords securely is GPG, I wouldn’t even use Signal for that.

Unless you owner of the app and what they are doing exactly you can’t trust anyone. You don’t know what they are going through or if they sold the app to someone or had a certain code implementation that leaks all of your data. I stopped using Chrome when I had clear evidence of it leaking data - urls visited.