They are required to for 911 support.
Obviously they are not required to keep the data, and especially not sell it.
(Minus maybe a sealed NSA directive, though that is pure speculation on my part)