[_moof]

They seem to be implying that because they are a "service provider," they aren't responsible for complying with CCPA rules even though they are the ones with the data.

Does this hold water? I'm reading the CCPA rules now but if anyone knows, it would save me some tedious research.

[pnw]

See point 7 at https://oag.ca.gov/privacy/ccpa

[ezfe]

I guess if one likens it to AWS S3 holding your data on behalf of Apple it makes sense