I'm paranoid and it makes me sick the fact that there's no push platform that supports encryption. I don't want service providers to know what I push.
There is still no "compile code, install app, and throw this process on a VPS" solution for pushes, from what I recall
So in this case you would push an encrypted message, and your app would decrypt the message before displaying its contents.
https://pushover.net/faq#security
They also have a warrant canary for what it's worth ttps://pushover.net/canary.asc