Nothing in the connection layer does this. It runs on Pear Runtime which is entirely open source. The connection is P2P and you can see everything in the code related to that. If something in the UI on top that is not yet open source has malicious connections in it , then sure that’s possible. There’s no APK yet (I do have one for some troubleshooting stuff I was helping with but it’s not publicly available yet and I’m not gonna audit it myself because ain’t nobody got time for dat 😆)

But as has been discussed, Keet is planned to be entirely open source after it’s out of beta. Just don’t use it if you are concerned with this for some reason or don’t trust them. But literally everything in Pears (and the networking runtime) is open sourced.