An investigation reveals other tech firms were not always aware how much access they had.