I agree that there are a lot of audit companies that would do exactly that. My question is more along the lines is there any trusted verification that any of these services are doing exactly what they are reportedly doing that I would feel safe about using, or are all of them a sham just waiting to be exploited?

Do any of these services provide a published external audit of their service that confirms they are following their 'no log' policy? Without that I feel that they have very little reason to follow said policy because it doesn't benefit them to do so as long as they are making money.

It would be great if Google would dedicate some more time to getting their mobile apps to support SSL. The one for Blackberry is still broken, which could make it a tempting target for hackers. Also, wouldn't a mobile wireless signal be more available to hackers trying to steal accounts?