Some providers have admitted to employees improperly viewing customer footage, or sharing data with law enforcement without a warrant.