I'm guessing that they use one or more third parties that do indeed scrape Google results but provide plausible deniability in the process. And I'd look very closely at the employment histories of principals at those nominal "third" parties. It's not that uncommon in this industry to find companies with exactly one customer, staffed entirely by ex-employees of that one customer.