Are you talking about the individuals or the companies? Companies can lie a lot of the time and just say they don't have the requested information, and the government has no way to know, unless they usually comply with similar requests. The government can seize servers, but can't compel disk encryption keys yet.