Safe trusting an US based company with data _at the very least_ requires that US doesn't have a law that allows them to spy on us. How does this not compute fo

Safe trusting an US based company with data _at the very least_ requires that US doesn't have a law that allows them to spy on us. How does this not compute for Americans, I cannot even comprehend.