Good question. Yes, we do sync your mail to our servers. We need to do this to provide many of the features we have.
We are taking security very seriously and are doing everything we can to dot our i's and cross our t's. Our engineering team is ex-Google / ex-Firebase engineers with lots of experience building high security, high reliability data systems at Google.