there is privacy and there is privacy.

what's your (broadly you I mean) threat model?

I'm not worried about the NSA or Mossad, I'm mostly worried about Google or Yandex or whoever. I don't do anything especially illegal, and just staying off the radar is mostly enough. I've got forreal PGP if I need it, got a buncha keys on the MIT keyring, etc.

Just someone who takes security and privacy seriously and is not a data reseller like the 'goog or MS. Problem is they have shown they don't take it seriously.

Not much. Availability first. I'm looking for European hosting in a serious country (mailbox.org is in Germany). I also don't want to see breaches. Critical for me is to bring my own domain, that way I can migrate on a whim.