They control the data access but if they dump it to HTML and send it back to me then I can do whatever I want with that HTML.
All we're asking is for symmetry. If I send them data, they can do whatever they want with it inside the law, their ToS and privacy policy. If they send me data (even the data I previously sent them), I can do whatever I want with it inside the law.