Real answer is where you choose to put your trust: every wallet you download might be compromised. 

For more trust, you can download the source code of the wallet, audit it, and compile it by yours. But this means your moved your trust from the app developer to the compiler developer. This can go on for a while.

In practice, i suggest to at least use open source wallet and always check online if the wallet is trusted for other individuals or if it has been audit by someone 

 shameless self-sharing

nostr:nevent1qqsgmcq9s9z5k89ndm8snzlaplr0jkyquya65x8j03mwvxm289f3mvspz3mhxue69uhhyetvv9ujumn0wd68ytnzvupzq6h3x5fcu5agxzy7t69dtuyvgnz7ym4v3v43xysau08yzcl88zvqqvzqqqqqqywsg3j3 

 this is an interesting tool, thanks! are you one of the developers for it? 

 i'm not. I'm a simple user who discovered their work 

 thank you, simple user 🙏🏽