If it’s in the ToS, then it’s not true that “[they] weren't supposed to do anything with our gmail data”.