As usual, never assume any technology or service is "private"/"secret" and rely on it as your sole protection. Also, all online communications can have metadata collected