In 2014, a tech company stood up to a National Security Agency demand for user data and challenged the legality of a controversial surveillance law that's currently being debated in US Congress.