Because you can't just selectively spy on the real terrorists (if there are any). You have to gather all the information on everyone, then you can narrow it down, by searching for "bomb" in all internet traffic for example.