The Thinning Line Between Commercial and Government Surveillance