Encrypt both, but only advertise the higher tier as being encrypted. Customers that place a high importance on encryption will buy the better plan. Those that don't will buy the lesser one.

You have minimal benefit for not encrypting all data anyway (more technical complexity and liability). Plus, there isn't a court anywhere that will get upset at you for selling a tier that's better / more featured than advertised.