Hacker News Reader

I can't figure out whether they have client-side encryption with a user-specific encryption key that they do not have access to.

Doesn't look like it. They have an API you could throw encrypted blobs at with a bit of work at least.