Updated by RDeyoung 9 Jan 2010

Raleigh NC - SLC Security Services discovered a little-known fact during the review of a recent cell phone audit. The phone was provided to SLC Security Services by a client and during the review, the SLC Security Investigator had to contact the cell phone provider to determine some carrier-specific technical information.

During the phone conversation, the investigator noted in the carrier's Terms Of Service (TOS) (listed in *very small print* on the carrier's web site), that unless the person paying to use the cell phone carrier's services (the "subscriber") chooses NOT to share their information with other third-party business partners of the cell phone carrier (via the CPNI -- Customer Proprietary Network Information),  the person's information can be shared (read that as "sold") to other companies.


For the last few years it was well known in the industry that the cell phone companies sell subscriber information to third parties in exchange for fees. It is up to the subscriber to opt out of these programs within the first 90 days of signing up with the cell phone carrier. Most subscribers are not even aware of the program and fail to remove their information from the carriers database. These databases are used to build databases that are used by vendors, telemarketers, bill collection agencies, private investigators or other intelligence agencies.


Ask your provider what there policy is on CPNI anytime you purchase a cellular phone from them. In addition don't forget that home landlines are also affected by the same issue.


Removing or Masking

After reviewing the topic it was noted that the carriers will not resell your information to third parties if you opt out but will provide it with a subpeona which is common practice. Some security professionals now suggest that you purchase a phone in a business name to alleviate the issue. In fact there are companies that will sell you a cell phone (in violation of the terms of service of the subscriber) to help you mask your identity. While perfectly legal the subscriber may find that the cellular provider can and will cancel your service without notice. Data brokers typically refuse to remove your information once they have it in their database. Our SLC Link and Data Link programs allow end users to remove their information from our databases upon request but we reserve the right to keep information for law enforcement and other legal request. Although you are not available in our products law enforcement is provided with information with a valid request via the courts.


We are caught in the middle of this type of situation and would like feedback. Email your concerns or comments to This e-mail address is being protected from spambots. You need JavaScript enabled to view it . We are open to suggestions or other ideas from our end users and the affected public.


Cell Phone in 72 Hours

Upon researching this topic we have noted brand new numbers in third party databases in as little as 72 hours. Several of these data providers have obtained this information directly from the cell phone companies and have confirmed same to our investigative team via telephone and in writing.

In a very connected world we are trading our rights of privacy in exchange for service.


Additional Information of Interest:

Provided by EPIC: http://epic.org/privacy/iei/