There doesn't have to be storage, NSA could always just force them to add it in later without telling you. Like every single USA company.