> obligation by contract to protect that information, even from the government
Contract never trumps statute anywhere.
The 4th Amendment to privacy trumps statues everywhere (i.e. neither the feds nor state can just legislate their ability to read private company data). The contract between the customer and the org. should prevent the org. from just handing it over willingly.
Now, does this mean no company will take the government to court to protect their user data? Maybe not, but the list of companies that I can think of which will do that is vanishingly small. And let's not forget that the AT&T NSA spying case was dismissed by the appeals court, and was not accepted by review in the supreme court. Do you think the outcome would be any different next time?
The problem is that if there is no way to effectively "petition a redress of grievances" (to borrow a phrase) about some constitutional violations, what is the point of that clause of the constitution? If you have legal protections of your rights, you must also have a court system that is willing to actually hold the government to account over violations of your rights -- and my impression of the US (as an outsider) is that this is not the case for 4th amendment violations.
I think we need need term limits in Congress, so the same stale minds can't dominate forever. Also I think states should start flexing their 10th amendment rights to show the feds that they care about their rights (state legalization of drugs, prostitution for example).
In general our court system is fairly good at upholding constitutional rights. It's not uncommon for a trial to be thrown out because some evidence was collected without a warrant, for example. However you're right that certain events question the viability of upholding our rights against a tyrannically government. That of course is why the 2nd amendment exists.
Edit: I thought we were talking about America.