Flock is required to comply with "lawful" requests and seems happy to do so.
This is largely the same for all major cloud camera operators. See also: Verkada and their facial recognition. These things are installed all over the place in public areas. And you think their facial recognition is compartmentalized to their specific tenant?