important is the question where does it get encrypted or decrypted.

Is it software on your computer that only you control? (then only you can see it, good.) or is it software on a server run by somebody else. (then that other entity can also see it, bad.)

sadly sometimes this is a bit hard to see for the user - one good indication is if it is open source software running on your computer.