You're assuming you still own your personal information... You should, but in reality you don't (stated in this specific context, but I do mean it in a broader sense as well. Much broader than should be) .

They don't need a warrant if the company consents... Its your personal information, but the company owns it. They can and do sell it, and the decision on wether to give it to law enforcement is on them.