The real lesson here is that if you really want your data to be private, you have to take responsibility for encrypting it or not uploading it anywhere.

Even in the best-case scenario, at least some employees can access data as part of their jobs. This has been true of every job I've ever worked at.