Twitter wants this both ways, they say it's the users' data when requested to turn it over, but they say it's their data when a user wants to use a 3rd party client to access it.