If we assume that everyone is telling the truth and that there is no back door or drop box, couldn't they simply get the data with man-in-the-middle type software? Getting data from Google, Facebook, Yahoo, and co is nice because it comes to you in a structure way but that wouldn't stop me from trying to get information in many others way, including working with the internet providers to put servers that copy data and direct them to my data center.