Comment by pixl97

They don't need the plaintext if they have your key. Since they wrote the application you have zero clue if they do or not.