The telcos are almost certainly selling it. Verizon used to have a page noting that LocationSmart was a "Network API Partner": https://archive.li/tCLrd

To do this you need access to the SS7 network. I don't believe this is the issue in question, as the providers have APIs for partners doing location services.

Source: I used to have direct access to such an API