A simple rule to follow is if you were to lose your phone/account password and the data can still be recovered they also have access to your data if they want it. Actually holding the key is critical to keeping your data private.