The important question regarding this whole mess is where are the equivalent of the Swiss banks for data?
Essentially: encryption, self-hosting, small-scale hosting (the NSA have scaling problems with vendors, though don't expect that to last), privacy tools including browser privacy (privoxy), tor, VPNs, the FreedomBox, and others.