I've never tried Express but I think it's hosted in the USA and having a VPN infrastructure there means that they can be subpoena'd - Meaning data can be demanded from them without informing the users. So I don't know if they sold out. Maybe they had no choice but to hand customer data over.