This.

If you aren't doing client-side encryption and keeping the keys private, the server has access one way or another.