I would expect UPS to inspect and record anything that they would come across in the course of delivering the package. So taking pictures of the outside, recording the destination address, etc. Similarly, given that AT&T can't send your bits without at least temporarily storing or buffering them, and indeed does a lot more inspection of your traffic than that, I don't have any particular expectation of privacy with regards to the bits short of their actually decrypting them.