For those now lauding non-US companies: keep in mind that you can not be certain that they aren't under any local intelligence orders and if/when they plan to enter the massive US market they will probably be tapped as well.
At least, hopefully, this debacle would cause some realistic assessment of the situation with regards to privacy, legality, and data retention instead of, for example, purposefully routing data through third-world totalitarian regimes just because their TLDs sound cool. (I know how DNS works; and it doesn't matter that your servers are elsewhere.)