What app? I’m not sure this makes any sense. If my device is encrypted at rest, and my data is encrypted in iCloud, it’s no different than collecting metadata from any source. I’ve yet to see anyone demonstrate this with iOS. If they could it would be international news like when pegasus spyware came around. Plenty of audits for the lockdown mode and iCloud advanced protections that show it can stand up to state actors. Don’t get me wrong, I love the work put into Graphene as much as anybody. Graphene is best yes, we all know. But out of stock Android, or stock iOS, Apple’s built far superior protections.

There is no stock iOS. There is only the Apple-provided iOS which you can't see the code and thus you can't actually check for anything. On WhatApp: "Depending on the request WhatsApp’s response may include, if available, basic subscriber information (such as their name, service start date, last seen date, IP address, device type, and email address), and account information (such as a user’s "about" information, profile photos, group information and contacts list). In the ordinary course of providing its service, WhatsApp does not store message logs once the messages are delivered or transaction logs of such delivered messages. In order to comply with a valid legal request, such as a valid Pen Register Trap and Trace Order in the United States, WhatsApp may start collecting message logs and call logs for a particular user indicating who the communication was to or from, the time it was transmitted and from which IP address, and the type of communication (such as a text or call)." https://faq.whatsapp.com/808280033839222