Signal 2.0 released with private messaging support
One question I always have with secure systems distributed by app stores, even the open source ones, is how to you verify the source you're reading is the app you're using?