Either you give a closed source app access to your files, or it saves your notes to it's cloud. Even apps that are open source aren't transparent as they haven't necessarily uploaded the version in github. So it all falls apart and you're back to plain old trust so long as you use the app stores.