First, as a regular person, operate under the assumption that nothing you do online (and perhaps in public) is private. To be fair, we should have been doing that even before this latest leak. I guarantee the US government is not the only state doing this. Likely any foreign government with sufficient resources is already doing the same things.
As developers, I second what @maruru has said. Focus on security first. If possible this should involve a subject matter expert. If not, focus on securing your data at every step of the process, from client to server and back.
Also, as a community we can support advocates for encryption and fight the constant attempts to weaken or demonize encryption by our various governments.