In a post-Snowden world that's just irresponsible. You have other competitors in Europe who do full client-side encryption which is the only form of encryption that satisfies the common sense of privacy.