Yep, Ashley Madison taught us we can't trust any company with our data.

You couldn't. But if they advertised their process of how they do it technically, especially the no server part, then the likelihood is far less.

It would be better than 23andme saying that they store it forever in their T&C, and advertise how great it is that it's in their servers basically forever.