There’s also the CLOUD Act, which compels them to share the information with law enforcement in the US and abroad. (The latter don’t have to have any due process around the data requests they issue, unless they have other laws requiring it.)