Having an open source code for the server is good for self hosting but it says nothing about the real server. You can only trust a service based on the API you use, and for privacy you better off not trusting anything, if you want privacy you need to send the data encrypted already.