Anyone who owns a server can access all the data stored on it, unless the data is end-to-end encrypted. Whether it's mastodon, Lemmy, Facebook, twitter, Gmail, vBulletin, whatever.
If you need to say something that you can't risk anyone else seeing, use an end-to-end encrypted messaging app, or implement encryption yourself using e.g. PGP.