Comment by somenewaccount1

I mean, it's open source, so you can audit it. https://github.com/qTox/qTox.

Then you can build the client yourself and check the sha sum against any downloaded distribution.