Pattern
Sensitive files need storage where the provider cannot read their contents.
Practice
Use end-to-end encrypted storage, or encrypt sensitive files before placing them in the cloud.
Start small
Choose one category of sensitive files and check whether the storage provider can read it.
Watch out
Encryption without a tested recovery method can turn a provider failure into permanent data loss.
how I avoid both surveillance and self-hosting hell