That 'not have access to private messages' is the complex thing that requires encryption done well. It is extremely complicated to make available to non technical people. No perfect solution presents itself.