They used to have a US office, which got me wondering if they're obligated to sell private user information to the US gov't.

Here's their current list of offices:

https://yandex.com/jobs/locations/

So, maybe? (Better than "definitely", though...)