If you're only worried about the NSA, and only worried about pervasive surveillance, the safest thing might actually be in the U.S., but only if you self-host t

If you're only worried about the NSA, and only worried about pervasive surveillance, the safest thing might actually be in the U.S., but only if you self-host the software and data. I've heard KDE devs recommend Switzerland. But in general it's kind of a quandary. You'd want hosting in a strong nation so that the U.S. doesn't simply use a black bag operation to force-collect the server hardware, but nations that are strong and opposed to the U.S. are undoubtedly being extensively monitored by NSA. Really it all depends on the threat model you're trying to defend against. If you end up with "You can trust me, I'm not from the government" you're already screwed.