On Sunday, the Washington Post published an expose revealing that private companies are peddling surveillance systems to foreign governments that track the location of cell phone users in the US and abroad. The report raised a basic question: How can this be happening when cell phone companies generally promise not to disclose their customers' location information without their consent?