You will be the owner of the data. And yes in theory could Mendix get to your data. Just as in any other data centre organisation employees also could get to the data of any server in that data centre. But there are rules for that. You can check their policy here: https://www.mendix.com/evaluation-guide/enterprise-capabilities/security
Regards,
Ronald