It's good to be skeptical. Verify. The apps are open-source and the protocol is open-source https://github.com/nostr-protocol/nips

I built my own client and relay so I know the CIA isn't involved in that. You could build your own too.