Why should they have to get a court order when the party in custody said they have the data? Unless they don't actually have the data and they're hiding behind the court.
If you had an account with them, how would you feel if some unknown third party could call them up and go "Uh hello you have my data give me access plz trust me bro"