If they are doing it for the government, than it is still a government operation.
Yup.
Just like when the Obama administration got foreign intelligence services to spy on American citizens.
Yup. It’s called a sub contractor. If any money changes hands then the government is totally liable.
Private companies should not be tracking military personnel anyway. That is called spying and against all sorts of laws.