Andreas Gal and I wrote about this question here:

https://brendaneich.com/2014/01/trust-but-verify/

Our plan then (while we were still at Mozilla), and my advice now, is to avoid blind trust. Use systems where you can both trust and verify that your data is not being secretly surveilled.