Under US law at the moment, everything point into the direction that the authorities can access the data hosted in the US while preventing the hosting company (Rackspace) to inform the client (us). The problem is also that the authorities do not even respect the law and you read nearly every month how they allowed themselves to kind of "wiretap" without the correct rights. So basically hosting in the US with the track record of the US authorities is not acceptable.