I've learned not to trust companies when they tout "completely encrypted" and "totally private".

Show me the open source code, otherwise they're likely collecting data in some way to pay for hosting this web application.