I’ve seen the odd reference to live tracking (like WhatsApp) in Signal but as I can’t find any real detail I assume that it doesn’t exist. Is that the case?
Signal has been pretty extensively audited and the source code is entirely available so I'm pretty sure we'd have heard about it by now. It should be impossible, if Signal don't have your private keys... but there's still an amount of trust that they haven't been compromised and had a malicious binary uploaded, or their encryption hasn't been broken, etc.