The same way that my bank does not own the contents of my savings account... Even if it is allowed to use that money (in highly limited and regulated ways) to, say, issue loans.

You don't own your users' data. Your users do. You may be allowed to use it in highly limited and regulated ways.