If you're really concerned, look into zero-knowledge encryption services where the provider mathematically cannot access your data even if they wanted to. Still requires trusting their implementation though