nullpay.
EmailIntermediate20 minall

Evaluating Email Providers

Risk

The risk

Why this matters

Gmail scans email for ad targeting. But paid doesn't automatically mean private — some paid providers still log IP addresses, cooperate broadly with law enforcement, or lack real end-to-end encryption. Don't conflate 'paid' with 'private'.

Setup guide

How to set it up

  1. 1

    Evaluate providers on: jurisdiction, encryption model (E2EE vs. at-rest), transparency reports, audit history

  2. 2

    Check if the provider encrypts at rest with zero-access (they can't read your mail even if compelled)

  3. 3

    Review their transparency report for law enforcement request volume

  4. 4

    Migrate to a provider that passes your evaluation — Proton Mail or Tuta are strong defaults