By making the customers use an external storage they are relieving themselves of whatever regulations (such as GDPR) they might be imposed of.