I tend to think that; if you do not own the data, then your rights in regards to the data, including rights to privacy of that data, are curtailed and likely non-existent. Te question of course then becomes who owns the data and who has copyright to the data because those are different things.