Couldn't they store encrypted messages on their servers but not store any keys? They'd just need a mechanism to privately share they key between devices (Bluetooth pairing)?