If they snoop your logs, but you have no information on your users then they will get nothing.
If they can snoop your traffic live than pretty much yes, anything US based is vulnerable, but at least my information is not being sold and traded between private companies.
