Heroku now abides by Safe Harbor

This is good news if you're a business that needs to cover its ass, bad news if your personal data ends up somewhere where it has zero legal privacy protection.