Facebook's response is the quintessential non-denial denial. Deny doing something you weren't actually accused of doing, but that sounds enough like it, so that you don't have to deny doing the thing you actually did.
The statements released by the companies (especially Apple and Facebook) are similar enough that they may be crafted talking points supplied by the government.
You're right that one is distinct and specifically says that they only release individual customer data.
Since weasel wording is pretty prevalent on this topic I would note that they could still run NSA algorithms on the dataset and return the individuals that are "hits".
The voluntary keyword completely invalidates that as a reference. If the program is not voluntary - and there's no way in hell that it was - then what Microsoft just said doesn't even apply to this discussion.
Considering the punishment by admitting it, and the "silence means you're guilty" thing that happens most of the time, I'd say they're pretty much left with no option other than to deny it even if it's a lie.
Like everybody else, I'm amused by the direct access phrasing.
Obviously the NSA doesn't have direct access. They don't need it, and wouldn't want it. If they had it, they couldn't have put together these nice convenient PR packets for times like this.
What the NSA most likely has, is signed assurances of data integrity, and unlimited API access.
The most important aspect to lying, is the intent to deceive, it binds all forms of lying together. What matters in the blanket denials being issued by all the companies, is their intent to deceive. Is it a lie when they say they don't give direct access to the NSA? Perhaps not, but their intent is deception, and that's what matters.
I'm wondering if the name of the project is a clue. Maybe they don't need access to the structured data. Maybe they just split the fiber optical stream using a 'prism' and pipe the output to Fort Meade.
In which case, Facebook are not lying when they say that the NSA don't have access to their servers, but they do have access to their network traffic.
"Protecting the privacy of our users and their data is a top priority for Facebook." -- and here comes the cue for the sitcom audience to start laughing.
"no direct access" Of course the gov't didn't have raw dumps to the SQL databases, they have their own neat little front end web application that Facebook provides to them.