There are two types. Legacy DM (kind 4) is encrypted but meta data is leaked. There is a newer one (NIP-17) which does not leak much except maybe you are being communicated via DM by an unknown person.
Discussion
Sir, there's also double ratched dms. It's a mess.