User data is private property and should be treated that way.

Businesses own their own data, but they may provide digital storage space for users to store their own data.

However, the users still retain all rights over their data. User data is a user’s data, not a business’ user data.

Treat it that way.