The simple answer is self-host (or dont host it online at all) if you really care about keeping your data safe. Otherwise, use a provider with a published name and address, and if they leak your data, use the legal system to resolve it.