I work for AT&T in prospect direct marketing and I can't see any of the customer data. They are a lot more protective of this information than you might expect.
Of course they are, they wouldn't want to make it worth less to sell that information to other companies. And, after all, AT&T has no obligations except to make money, and no public oversight. The best part is that since AT&T makes money off of this surveillance (even more information than NSA has out of AT&T, with less procedure) nobody is particularly upset about it. We are all just used to the idea that everything we do or say is owned by some private company which is empowered to sell it to whoever, and nobody wants to change it because there's money to be made.
Actually, they are horribly afraid of getting sued for privacy violations. Not that anyone would win but the directors involved get a big black eye if anyone had data and it wasn't cleared through legal.
They got dragged into a class-action lawsuit involving credit data before my time and thus everyone in the marketing organization is very careful to follow the rules. Unlike the big banks, they don't view fines and lawsuits as 'cost of doing business'.
