Fwiw that post states:

> It has been pointed out to us that since we have our servers in the US, we are under US jurisdiction. We do not believe this to be the case. We do not have a legal presence in the US, no company incorporated in the US, no staff in the US, and no one in the US with login access to any servers located in the US. Even if a US court were to serve us with a court order, subpoena or other instruction to hand over user data, Australian communications and privacy law explicitly forbids us from doing so.

They can say what they like, and I am a customer, but in hand-wavey generalization terms one should be aware that Australian law enforcement has excessively broad access to telecommunications data on request and a long history of doing the bidding of the United States. Carriers are forced to retain your data for 2 years.

Under TIA Act provisions (such as s180), an authorised officer of a criminal law‑enforcement agency can authorise access to prospective telecommunications data [metadata only; not whole messages] if satisfied it is reasonably necessary for investigating an offence punishable by at least three years’ imprisonment. (In other words, ~any time they want)

Example: the data‑retention regime’s records were being accessed over 350,000 times a year by at least 87 different agencies, including non‑traditional bodies such as local councils and the RSPCA [pet cruelty nonprofit].

Given Australia's population is only 28M, that means roughly 1 in every 80 people gets communications metadata pulled by their own government annually.