Many social media sites are headquartered in the US, so private accounts there are completely open to an NSL (or the DHS' equivalent). Information-gathering doesn't have to comprehensively cover every site to yield results.