Great line of thinking and very valid arguments, and also the reason we didn't think of any ad supported model.

Currently we encrypt the notes and store them within appengine, while the search results are saved/cached as plaintext. No formal privacy policy atm, but we don't give your notes and neither does one of the third parties (GA as the content comes after GA, intercom and sentry).