I'd be more worried if the apps were closed source but the ones I've heard about that are making an actual implementation of the protocol are open source so you can see everything it is doing, who it is contacting etc