>half of the people in the comments are asking why they should trust them and rightfully so. Exactly. The problem isn't only "will they sell my data via B2B",

>half of the people in the comments are asking why they should trust them and rightfully so. Exactly. The problem isn't only "will they sell my data via B2B", or, "Do they hand out data to governments via classified programs like PRISM?" The question is "how is this yet another centralized trove of data protected". Governments and organized crime both hack servers. The real question is "how protected is data when that happens?" The reason self-hosting is so nice, is you can harder the hell out of your own server, you know it's up to date, and you know compromising it is low priority. So my take is this: Any cloud service promoting itself as libre, without using end-to-end encryption for all communication, and client-side encryption for *everything* else, is indistinguishable from malicious companies. You're supposed to know what you can do for the user, and you're also supposed to actually implement those best practices. Also, since the effectiveness of web based crypto has been discussed ad nauseam, and debunked by major names like Arcieri and Kobeissi, I'm just going to state "you better deliver FOSS native clients for your cloud, otherwise it's not going to matter".