"If there was an API for uploading your secret conversations, it would be the holy grail discovery for a security researcher. Someone would have found it."
I think the difference here is that apps getting uploaded to the app store have static analysis run on them looking for unauthorized calls. Still doesn't rule it out, but adds an extra check to the process.