527
Proton Mail Discloses User Data Leading to Arrest in Spain
(restoreprivacy.com)
This is a most excellent place for technology news and articles.
They do mention it on that page:
The only ever claim to encrypt message contents and attachments. And explicitly call out account meta data here as something they can hand over if requested by law enforcement. They also mention they are not good vs targeted and governmental level attacks:
And explicitly mention they might be compelled to log and give up information like ip adresses: