The protocol is open source and as far is i know you don't see it sending your secret key to some shady servers without permission at the same time the data is constantly in your possession be that one of your servers or your clients.

I admit that the client being closed source is not ideal however i would still call it more private then Dropbox or Google Drive.