This. The best you can do is encrypt your messages locally before sending. But then your email service provider still knows where you are, when and to whom you are sending the message to, and how long is it. And so does the recepient’s email provider and anyone in between. Best they can do is to promise not to keep that data. But it’s just that - a promise, which there is no way to verify.