This phrase 'direct access' -- I wouldn't assume, if there exists something like PRISM, that it would have 'direct access' to anybody's servers. More likely, the data would be given from a company TO PRISM.
You could even argue that an API would not be 'direct access'
You could even argue that an API would not be 'direct access'