So it's ok for a privately held company to have this data but not the police without a warrant?