In light of the recent heartbleed vulnerability, I'm thinking of switching to a service like 1Password. However, I don't know how to evaluate the risk of NSA (or other government) spying. So, two questions: how can I evaluate the risk of such spying, and is 1Password secure from it?
EDIT: I thought it went without saying, but I'm interested in answers that explain the rationale used. I'm not interested in baseless opinion about 1Password (like "1Password sucks!"), but I am interested in impartial criticism, with an emphasis on how one can evaluate services like it with respect to this vulnerability. Also, please back up any opinions with facts and references.
EDIT 2: I realize that asking for definitive proof of spying is unrealistic. I'm asking for a way of evaluating the risks. For example, if they claimed to be free of government spying, that would be useful information. (They make no such claim, as far as I can tell.) Or perhaps it is significant that they are a Canadian company. I don't know, and I would appreciate help from you security experts.