I don't think it is that hard to verify what the client does with your data. It is right there in the source. > Since version 3.15.0 Signal for Android has sup

I don't think it is that hard to verify what the client does with your data. It is right there in the source. > Since version 3.15.0 Signal for Android has supported reproducible builds. https://github.com/signalapp/Signal-Android/blob/main/reproducible-builds/README.md https://github.com/signalapp/Signal-Android/blob/main/reprod... I haven't tried to compare a local Android build to the published version myself, so can't directly confirm the accuracy of this document. Either way, I agree that a released build can slip by unnoticed by most users. This is not a problem unique to Signal though. At least with Signal you have the option to verify a build before updating. You can also build and run the entirely open source client yourself, which makes verification redundant.