I read in a previous article that they provided the information when required by subpoena or warrant. Not sure much has changed other than publicly stating requirements.

Also, definitely be careful about which apps you use. Any dev could put you at risk of sensitive data being leaked to Apple or elsewhere.