There are only three mobile carriers in the US, which means at most three organizations controlling the CGNATs. I can assure you that they are selling the reverse port-to-user mapping to the highest bidders.
Seems insane to me, it's one of those thing you take for granted elsewhere, yeah of course my mobile ISP knows my location, as does the govt if they ask the ISP in an email, that's fine. (Quite sure most carriers have no qualms just handing it over on request)
But just selling that info for cents to any third party seems so utterly egregious and a massive betrayal of consumer trust.
Based on what evidence?