The fact that it's not on a popular cloud camera provider may make it harder for them to discover what it is they need to request, but they can still do it and you could still be compelled to comply.
In that case I would kind of rather they go to a megacorp vs. me needing to get a lawyer and figure out how to respond.
But generally I agree that it's sketchy for a third party to hold the data.