A third-party audit, like mentioned in a sibling comment, would be great. Many claims are verifiable, however, especially the claims that data remains on your device - just run it without internet, or sniff the traffic.