Do not assume that Signal is completely private.
It's a lot more private than most, but our three letter agencies (and other countries) can get at it. They collect the encryption keys either MITM style or backdoor on Signal's servers. Also collect the encrypted traffic, so they can use the keys + the packets at any point in the future.
Any app with a reputation for privacy is a high target for tampering.