Smallpdf is generally thought to be safe and reliable. It has ISO/IEC 27001 certification and follows GDPR, CCPA, eIDAS, and Swiss data privacy laws.
It uses TLS encryption for file transfers and deletes uploaded files automatically (after an hour for free users, but there are special rules for signature/eSign workflows).
Some users have had bad experiences with billing, like being charged after a free trial, not being able to stop, or not being told that a trial would automatically renew.
That being said, there have been no solid reports of a data breach or malware risk. However, the billing terms may have "hidden" parts if you don't make sure to stop or opt out in time.
This is the information we have, but if you have more insights from your experience, please share in the comments.