Accrediting agencies in the US are privately operated, too. There’s a layer of independent oversight between the Department of Education and the schools themselves.
Whether that’s good or bad is far beyond my knowledge, but that’s how it’s legal. It’s just one private organization giving a thumbs up to another private organization.