If you talk to a Google engineer, you would realise the countlesss number of measures they take to safeguard user's data - human access is next to impossible. Only machines roles are allowed to request for decryption keys and each access is logged and audited. And even the data a machine gets to see is annonymized and only aggregated analysis is usually allowed which is also required to be approved by dedicated Legal and Security teams.
Having worked at a start-up I know how much these smaller companies care about privacy - trust me you are way better with your data lying in Google servers than one of these random small companies claiming to 'protect your privacy'. I would rather trust the brilliant minds at Google to safeguard my data any day.