Comment by rsingel

Actually there's no law in the U.S. about data retention (E.U. has one) but companies keep the data for their own engineering and marketing purposes AND to stay in good graces of authorities. (The Patriot Act and ECPA, among other laws, specify what data has to be turned over with a lawful request, but they don't require any entity to actually have that info.)