Just to clarify, I’m self-hosting. I’m using neither Proton nor Dropbox.

However, I’m a privacy pro, and I read Privacy Policies on a daily basis (ok… weekly basis).

The US companies recently moved to disclose ALL the providers they are using (including for controller activities) where European companies still hide this information (and disclose only the providers used to deliver the service). For a very concrete example, Salesforces is mentionned by Dropbox where Proton is silent about the crm they use.

On this specific aspect, the USA are ahead of EU.

That’s all I meant.

If you want to read it as “give your data to the USA”, feel free, but that’s not what I said.

I was not saying “Dropbox good” or “Proton bad”, just correcting a few things about the privacy policy in itself and what it means.

Encryption will not protect your privacy in the specific case of Dropbox.

They look into your activity, not files.

And that’s pretty much standard for any kind of commercial SaaS, just because of security concerns.

Also, they are quite transparent about the provider they are using for internal activities (Stripe, etc.). Companies in EU will typically not disclose such information. For example, Dropbox disclose the use of AWS (for hosting the infra & code, I guess), whereas Proton does not disclose any hosting company.