Comment by JoshuaRogers

You might consider 1Password. They don’t have the key so they effectively only see an all of the data in encrypted form, not even revealing the site, if I recall.

They have some fascinating papers about it, if I recall.