For its premium (paid) customers, there was an option to provide Lavabit with a public key from a private - public key pair; it would drop all incoming mail to your account through the public key and delete the original plain text, leaving only an encrypted blob. Since Lavabit never had the private key, and deleted logs, if they were compromised on the server, there would be nothing to analyse.
