Thanks for your detailed reply. Can we agree that there is a difference between CDRs and provisioning info? No one will complain that you are obeying the law with respect to the latter, but "never" is a strange call record deletion policy. Not even an ILEC would try that. A policy this strange will cost you customers, especially since anyone trying this service is much more likely to think about privacy issues.