> their data

That’s the issue. User data always is the users data, the company merely has the license to store and access it.

Retroactive more permissible licenses are also not okay.