I believe you are correct. Blackberrys connected to a BES were end-to-end encrypted before that became mainstream. The key was only stored on the device and on the server.

For consumer services the story is very different.