I wonder if they've consider developing a Google Apps appliance, a contained webserver (physical or virtual) with just a simple API to store and load documents, email, etc. You'd load the software from 'the cloud', which would then call the appliance on the LAN to get your stuff.

Seems to satisfy the privacy requirements while keeping the more maintenance heavy components on their machines.