A federal surveillance law is expiring this month, and the debate around it touches something most small business owners haven't thought about: whether your business communications have already been swept into a government database without a warrant, and what you can realistically do about it.