PRISM is/was a small program. "Upstream" programs is the what most should be worried about and goes sort of around companies (and anyone/anything else).

Though, some companies are handed a court order to "share" their data (quarterly, about 80 companies so far). And NSA has standard rates for this.