This is a really interesting issue. Aside from the angle where the government would normally need to get a warrant to get this information, there's another angle where it's totally legal for private companies to surveil the shit out of citizens. It's only the fact that the government getting access to it that's a concern.

This seems fucked. If it's enough of a problem that we think government shouldn't be doing it, maybe nobody should be doing it?