It doesn't matter who's paying for it, the plaintiffs still have a case.

The law is crap. If lawmakers were concerned about privacy, they'd pass a privacy law regulating all services, not just one.