Sadly, you're going to need to encrypt before uploading. Just as the webserver should never trust the client, the user should never trust the server with sensitive data.

Try boxcryptor - works with more than just Dropbox.