Whoever owns the domain can point it's mx record (that's where the mail is delivered to) to whatever server, gateway, maninthemiddle device they want.
So if you use anybody elses domain for mail (even gmail or yahoo) they could see, read and save it.