> can enact a data privacy and storage requirement for apps?

Sure they can. But they're probably making money from the arrangement somehow. At least the app publishing fee, but possibly also all data going through their APIs.

https://en.wikipedia.org/wiki/Firebase#User_privacy_controve...

https://www.jurist.org/news/2022/01/us-federal-judge-dismiss...