Same way you trust hey.com not share all your email with everyone publicly. By building some kind of trust, describing how they work, their policies, being clear about how they make money and so on.

I don’t know of any VPN provider as trustworthy as DHH and Basecamp.

That's not relevant.

Sure it is! All of my network traffic is going over a VPN. Not the case with email.