If you use an app with E2E (end-to-end encryption) then you are good, but Facebook even though it offers it, it's not on by default and they still collect a lot of metadata. Signal would be recommenation to any non tech savvy person who just wants to keep their private messages private.