You're right. Legally setup foreign businesses can't be forced to comply with US law, unless it's fraud or other criminal activity.

There's still a few safe places out there to do business legally and protect your data. The Bahamas comes to mind.