Whatever your software, the person running it can read your messages. Unless you're using a non-web client that does E2EE, of which there are none right now.
Yeah, I guess secure scuttlebutt comes to mind? But it's kinda it's own thing, notably with it's own scaling issues when it comes to widespread use.
Signal?