What sort of threats does the NSA give to these companies so they participated without any leaks? Just curious what the penalty would be if the NSA approached me about sucking down my user data and I refused.
You're not even supposed to reveal that you are complying (gag order). Google has been in the news recently about fighting one in court.