It's not spying if the customer agreed to hand over the information.

That's why you have to read contracts very carefully.