The providers are responsible for their customer's privacy, to whatever extent is laid out in the contract, so I could see a grounds for some sort of liability there. But I don't see how the company is responsible for their customer's constitutional rights. I would think that that question should be more about whether the government actors can ask for and use that data.