I think this is an important point. The article says WhatsApp doesn't collect metadata as normal course, but it can and will where legally required. Then it sa

I think this is an important point. The article says WhatsApp doesn't collect metadata as normal course, but it can and will where legally required. Then it says Signal doesn't collect metadata, and stops there. I'm pretty willing to bet they're just as governed by NSLs as WhatsApp, and if legally required, can and will collect said metadata and hand it over. The only way to not do so is to go the Lavabit route.