There's multiple types of ownership.

There's legal title. And then there's possession.

AA clearly possesses this data. It's not incorrect for them to refer to it as "their" data, until and unless it is removed from their possession.