NEVER use biometric unlock! You can legally be compelled to provide biometric unlock, you cannot be legally compelled to give PIN/passwords.

Although fortunately none of this is about some sort of backdoor into the app's end-to-end encryption, it's still very concerning that they can simply get all of your contacts and message recipients.

I don't see any reason why people don't switch to Signal. It's just as convenient and usable, but doesn't spy on its users