There is pCloud which is based in Switzerland which has mostly the same regulation as the EU. They specifically state that they won’t use your data for commercial purposes. Until the company merges or gets bought I guess.

Ofc if it’s not end-to-end encrypted and all open source and self hosted, you can’t really be sure.