If the storage is on US soil their contractual privacy declaration is meaningless. They can either be forced to hand over data or they can be backdoored to take it without their knowledge. They are becoming the Cloudflare of digital life patterns and that is a tempting target for the powers who want that data.