What records might a telecommunications provider hold?¶
A telecommunications provider may hold subscription, SIM, device-association and network-event records. Those records do not automatically identify the actual user or contain the readable content of every communication.
Subscription and network activity are different evidence¶
Customer data can describe the account holder, billing, telephone-number allocation, SIM or eSIM, porting history and service contact. Technical records may associate IMSI and ICCID values, device identifiers, calls, SMS events, data sessions and routing or network connections.
The available fields and retention depend on the provider, service and period. A number may have been ported between providers or reassigned, so different organisations can hold different parts of its history.
For SMS, a network event may survive without readable text. For internet messaging, the mobile network may evidence data connectivity without seeing application content. Handset and provider records should therefore retain their separate meanings.
Corroborate the user and content¶
Preserve the full international number, date range, provider history, SIM identifiers and device identifiers. Obtain original fields, definitions and time bases where possible.
Compare the result with handset data, messaging-account records, possession, location and witness evidence. Report subscriber identity, network activity, device association and personal use as separate propositions.
The point to remember
Use telecoms records to establish service and network relationships, then prove the actual user and communication content from endpoint and contextual evidence.