PRISM doesn't appear to cover phone calls. That's why these programs are arguably legal: its not illegal to collect metadata about phone calls, nor is it illegal as a general rule to collect things like web searches. Now, you can argue "there should be a law against that!" but as it stands there isn't.