The opnly confirmed thing I have heard is that they can read signal messages via your notifications, if they are enabled, so always check the app manually and do not use their push service.