After asking two questions about the security of online cloud storage, it seems to me that we can only at best speculate as to the security practices of the hosting company, and believe what they tell us. Or can we do something more?
For example, people have assessed that Dropbox and Google Drive are insecure because their employees can technically read your files if they desire due to the encryption keys being stored on their server. We know this through interviews with their representatives and the wordings of their Terms of Service.
However, suppose they were to keep their method of storage a secret. Would we be able to know for sure whether they can read our files?
Additionally, there are services like BoxCryptor or Viivo which will encrypt your file before they are transferred to Dropbox or Google Drive. We can verify that this is true by looking at our file through Dropbox or Google Drive, and see that it is in fact encrypted.
However, there are also storage services like SpiderOak and Sync which offers end to end encryption builtin. However, the same strategy doesn't work because our files will be unencrypted once it is downloaded. For these services, how can we be sure whether or not our files are encrypted like they claim?