> you just wouldn't be able to tell.
You can setup a local web proxy and tell us. Also check the sources since it's an electron app.
It's probably not always this easy. I see many connections on apps using UDP, so who knows how, exactly, they are encoded.
The data may also be "encrypted", similar to how Zoom "encrypted" data. That is to say, the data is encrypted, but the private key is on the same server. So, if you MITM, it looks encrypted - but there's no security.
Based off of that, I then assume that other companies are exfiltrating as much data as possible off my devices.
I mean, even your car, which, keep in mind, is a multi-tens-of-thousands dollar product, exfiltrates your location, all your texts, all your phone calls, and as much data from your phone as possible.
Yes, this is a "leap of faith". I am not bound by a purely evidence-based worldview - I consider that naivety. I do not need strong irrefutable evidence of bad things happening. When people are untrustworthy, I approach them with skepticism in order to protect myself.
For example, I have absolutely no proof that the NSA is surveilling SMS and telephony right now. None at all. But I know Prism was a thing. It is safe to assume the NSA is absolutely surveilling SMS and telephony.
And, I'm almost always right, in my experience.
I don't need proof that some random man is a mugger to know to put my phone in my pocket and walk quickly at 3 AM. This is what I mean when I say your mentality here is naive - how many times do you need to get mugged to learn?
And, secondly, even if you DO require proof, this is an incredibly inefficient way to live. If you require proof for everything, you wouldn't be able to get much done. You'll be sitting around waiting, or searching. Sometimes, it's faster to assume, if your assumption is good.
If a company is willing to do even small privacy violations, I do not trust them at all. Feel free to run OpenSnitch or LittleSnitch - most apps are opening connections to many domains you won't recognize. Your guess is as good as anyone's what data they're exfiltrating. That is, of course, unless you use more privacy-preserving apps that are typically opensource.