Just from a purely legal perspective, I'm not sure Apple and Google are even supposed to have that data? The company that sells the app, assuming they collected

Just from a purely legal perspective, I'm not sure Apple and Google are even supposed to have that data? The company that sells the app, assuming they collected the information, technically was not supposed to share anything with Apple or Google. (Or rather, they were only supposed to share under certain very specific conditions.) So I can't really tell what the Feds are asking for in particular? But assuming they are asking for information specific to the app, I'm not sure that Apple or Google were supposed to be snooping that information under GDPR? And I'm very sure that the app maker was not supposed to be collecting it in any kind of a way that shared it with Google or Apple. (Certainly not sharing it outright.)