Hacker News Reader

The contact discovery services leaks the fact that you are using Signal. It is not optional. It's clear why that is, so I won't spell it out.

They can get download records from Google or Apple to check for Signal downloads.

So there’s really no reason for Signal to try and hide one is merely using Signal. Best to focus on securing content.

You are missing the attack vector here.

It is optional isn’t it? I never gave Signal permission to read my contacts and yet I still use it.