It's as safe as your device. If your phone is infected with malware, you can't expect your wallet to remain safe but yes, the developers of the wallet cannot access everyone's funds.