The only trust I will have with IoT companies is if they let me set up my own set of E2EE keys, combined with an independent security audit proving they use strong encryption schemes as well as the inability to access the cleartext data in transit or at rest.
The only sane level of trust in computing related to personal data is zero-trust.