The app is closed source. Facebook could be copying all your private keys to their servers and you would never know.