A few people have asked for specific details, and I'm not going to call out a specific project; However, someone asked about general red flags and I will list a few here:
Beware of "metadata resistant" privacy apps that:
Advertise Real time Audio / Video.
Have Offline messaging on mobile / without self hosting some kind of server
Have "No Identities"
Rolled their own onion-routing
Rolled their own mixnet
Implement offline storage with 3rd party servers that is somehow efficient.