I was actually partially wrong. Your likes are private on official apps and website, but the data for them is still public, so modded apks and stuff can still read them I think. If you're that paranoid about people looking into it.