Private companies are being used to hoover up massive amounts of data and circumvent legal protections such as warrants.