They should ask if any of the data that CA received were from non-current users - if so, and its impossible not to, then he just contradicted his previous statement