> First, it doesn't have logins and passwords so you cannot even log in without having a phone nearby.

You can set-up a password. Also you can login with a Telegram device nearby, e.g. a tablet or laptop. No phone required.

> Second, it collects and uploads all of your contacts to Durov's servers.

No, you can deny access or don't use the app from your phone. Contacts can be added by username, too.

> Third, all the messages are stored on the servers too so Durov can read them at his spare time.

No, the so-called secret chats are end-to-end encrypted and not stored on their servers.