Carriers to be required by FCC to protect customer data on the device
Wireless carriers are also bound by CPNI rules, but today the FCC made a Declaratory Ruling clarifying that carriers are required to protect data that may reside on subscribers’ devices.
That includes not only the device, but also data related to pre-installed apps. The ruling does not apply to third-party apps that are installed by the user. Carriers collect the data for billing and network performance reasons, and that data has already been protected as CPNI, the ruling extends that protection to the devices now. This does not change how the carriers use the data they collect however.
sources: FCC via PhoneScoop