They don't have to be able to read your messages server-side to pick out keywords client-side and send those unencrypted.
It would still be truthful: all messages are encrypted e2e, but the app on your device parses decrypted messages to "deliver relevant ads".
Also:
>kinda scary since some people I know keep Social Security numbers in their contacts.
That is absolutely terrifying.
