Annual47C.F.R. 64.

2009(e)CPNI Certification
EBDocket06-36
Annual64.2009(e)CPNI Certificationfor2013
Datefiled: February18,2014
Nameofcompany(s)covered bythiscertification: Apollophone,Inc
Form499 Filer10: 828076
Nameofsignatory: JeffreyPlatt
Titleofsignatory: VicePresident
I, JeffreyPlatt, certifythatIam an officerofApollophone, Inc, (hereinafter"thecompany")
named above, and acting as an agentofthecompany, thatIhavepersonalknowledgethatthe
companyhasestablished operatingproceduresthatareadequatetoensurecompliancewith
theCommission'sCPNI rules. See 47C.F.R. 64.2001 et seq.
Attachedtothiscertification isan accompanyingstatementexplaininghowthecompany's
proceduresensurethatthecompanyisin compliancewiththerequirementssetforth in section
64.2001 et seq. oftheCommission'srules. (seeAttachment)
Thecompanyhasnottakenanyactions(proceedingsinstitutedorpetitionsfiled byacompany
ateitherstatecommissions, thecourtsystem, orattheCommission againstdatabrokers)
againstdatabrokersinthepastyear.
Thecompanyunderstandsthatitmustreporton anyinformationthatithaswith respecttothe
processespretextersareusingtoattempttoaccessCPNI ,andwhatstepscompaniesare
taking toprotectCPNI.
Thecompanyhasnotreceived anycustomercomplaints in thepastyearconcerning the
unauthorized releaseofCPNI and thecompanyhasreceivedQ numberofcustomercomplaints
relatedtounauthorized accesstoCPNI,orunauthorizeddisclosureofCPNI, brokendownby
categoryorcomplaintasfollows:
(1) Instancesofimproperaccessbyemployees: 0complaints
(2) Instancesofimproperdisclosureto individualsnotauthorizedto receivethe
information: 0complaints
(3) Instancesofimproperaccessto onlineinformationbyindividualsnotauthorizedto
viewtheinformation: 0complaints
Ifitwereaffirmative, above, thecompanywould haveprovidedasummaryofall customer
complaintsreceived intherJast theunauthorizedreleaseofCPNI.
Signed \
Attachment
Annual47 C.F.R. S:64.2009(e)CPNI Certification
EBDocket0636
Apollophone,Inc Form499Filer10: 828076
Thefollowing arethemeasuresputin placebythecompanytoprotectCPNIfrom pretexting.
Thecompanyunderstandsthatthethreecommontypesofpretexting areidentitytheft, selling
personaldataforprofitwithoutauthorizationbytheownerorusingsomeothermethodfor
snoopingforinformationwhosereleasewasnotauthorized bytheownerofthe information.
1. Pretextingvia IdentityTheft
a. Identitytheftviatheftofphysicalhardwarecontaining CPNI Data
GuardingMeasures:
Thecompanyutilizesphysicalsecuritysuchas locksandsecuritysurveillanceto
protectphysicalhardwareand limitsphysicalaccesstoauthorized personnel.Also,
certain portablehardwaresuchas laptops, havesecurityfeaturesthatprovide
additionalsecurity.
b. Identitytheftvia hacking/virtualintrusionofsystemsthatcarryCPNI
GuardingMeasures:
Thecompanyutilizessecuritysoftwaretodetectand preventunauthorizedaccessvia
hackingandothervirtual methods.
2. Pretexting byselling CPNIforprofitwithoutauthorizationbytheowner
a. Selling CPNIdatabythecompanytoothercompanies
GuardingMeasures:
ThecompanydoesnotshareCPNIdatawithothercompaniesformarketingorprofit
purposes.
b. SharingCPNI dataforprofit/marketingpurposesbythecompanywithsister
companies, subsidiaries, parentcompaniesorjointventureentities
GuardingMeasures:
See"HowtheCompanyComplieswith47C.F.R. S:64.2001-64.2011 etseq", items1
to 18
3. Pretextingvia someothermethodforsnoopingforinformationwhosereleasewasnot
authorized bytheowner
a. Snoopingvia socialengineering/impersonationlfalseidentification
GuardingMeasures:
Thecompany'scustomerservicepersonnel(theindividualsmostlikelytobethe
targetsofsocialengineering)havespecificpoliciesthattheymustfollowtoidentify
thattheyarein contactwith theowneroftheCPNI datapriortodiscussingor
revealingCPN!.
b. Snooping bypersonnelnotauthorizedtoaccessdata
GuardingMeasures:
ThecompanylimitsaccessofCPNItoauthorized personnel only.

Attachmentpage #1
Attachment
Annual47C.F.R.S:64.2009(e)CPNI Certification
EB Docket06-36
Apollophone,Inc Form499FilerID: 828076
Thefollowing items1)to18)arehowthecompanyguardsCPNIagainstpretexting in theform
ofselling CPNIforprofitormarketingpurposesbythecompanytoitssistercompanies,
subsidiaries, parentcompaniesorjointventureentitiesbutwithoutauthorizationbytheowner.
In theeventthatthecompanywastosellorshareCPNIwith itsaffiliatedentitiesformarketing
orprofitpurposes, itwould strictlyabidebythefollowing policiesin compliancewith FCC rules
outlined in section222fotheCommunicationsActof1934asamended,47 U.S.C. 222 (47
C.F.R. S:64.2001 to64.2011 etseq.).
HowtheCompanyComplieswith47C.F.R.5:64.2001-64.2011 etseq
1) Thecompanydoesnotenableuse,disclosureorpermitaccessto CPNIforanymarketing
purposesto anypersons, entitiesparties outsideofthecompanywithoutthespecific
consentofthecustomerthatownstheCPNIdata.
2) IfthecompanywishestoshareCPNI with anysubsidiariesor parentcompaniesofthe
companyand thecustomeronlysubscribestoonly1categoryofserviceoffered bythe
company, thecompanywillsecuretheconsentofthe customerpriortosharingthatCPNI
datawith subsidiariesorparentcompaniesofthecompany.
3) In mostcases, thecompanywillgoastepaboveandtrytosecurethe consentofthe
customertoshareCPNI datawith subsidiariesand parentcompaniesofthecompany,
regardlessofwhethercustomersubscribesto 1ormorethan 1typeofserviceoffered bythe
company.
4) Thecompanywill notutilize, discloseorpermitaccesstoCPNI datato identifyortrack
customersthatcallcompeting serviceproviders.
5) Ifthecompanyrequirescustomerconsentforutilizing, disclosingorpermitting accessto
CPNI data, thecompanywillobtainconsentthrough written, oralorelectronicmethods.
6) Thecompanyunderstandsthatcarriersthatrelyonoral approvalshall beartheburdenof
provingthatsuchapproval hasbeen given in compliancewiththeCommission'srules.
7) Thecompanyhasapolicyin which anycustomerapprovalsobtainedfortheuse, disclosing
orutilizationofCPNIdatawill remain in effectuntilthecustomerrevokesorlimitssuch
approvalordisapproval.
8) ForallOpt-Outand Opt-InApproval Processesutilized bytheCompanyin whichtheCPNI
dataisusedformarketingcommunicationsrelated servicestothatcustomer, thecompany
will makethatcustomer'sdataindividuallyidentifiabletothecustomerandstatethespecific
marketingpurposethatCPNIwould beutilized.
9) Priortoanysolicitationofthecustomerforapproval ,thecompanyprovidesnotificationtothe
customerofthecustomer'srightsto restrictto useof,disclosureof, andaccesstothat
customer'sCPNI.
Attachmentpage #2

Attachment
Annual47 C.F.R. S:64.2009(e)CPNICertification
EBDocket06-36
Apollophone,Inc Form499Filer10: 828076
10) Thecompanymaintainsrecordsofnotification,whetheroral, writtenorelectronic,forat
leastoneyear. Thecompanyprovidesindividualnoticestocustomerswhen soliciting
approvalto use, discloseorpermitaccesstocustomer'sCPNI.
11) In caseswherethecompanyrequestsCPNI releaserequestsfrom thecustomer, the
companyincludesthefollowing in its"ConsentofNotice"
a) Sufficientinformationtoenablethecustomerto makean informeddecisionasto
whethertopermitthecompanytouse, discloseorpermitaccessto, thecustomer's
CPNI.
b) Statementdeclaringthatthecustomerhasaright, and thatthecompanyhastheduty,
underfederallaw, toprotecttheconfidentialityofCPNI.
c) Specificstatementon thetypesofinformationthatconstituteCPNI (asdefinedin
64.2001)andthespecificentitiesthatwill receivetheCPNI, describingthepurposesfor
which CPNI will be used, and informingthecustomerofhisorherrighttodisapprove
thoseuses, and denyorwithdrawaccessto CPNI atanytime.
d) Statementadvisingthecustomeroftheprecisestepsthecustomermusttakein orderto
grantordenyaccessto CPNI, andaclearstatementthatadenialofapprovalwill not
affecttheprovision ofanyservicestowhichthe customersubscribes. Thecompanyalso
providesabriefstatement, in dearand neutrallanguage, describingconsequences
directlyresultingfromthelackofaccesstoCPNI. Thecompany'snotificationwill be
comprehensibleand notbe misleading.
e) Incaseswherethecompanyutilizeswritten notification, thenoticewill beclear, legible,
containsufficientlylargetypeand beplaced in anareasoastobereadilyapparenttoa
customer.
f) In theeventthatthenotification isto betranslated intoanotherlanguage, thenall
portionsofthecompany'snotificationwill betranslated intothatlanguage.
g) Thecompanywill notincludein the notificationanystatementattemptingtoencouragea
customertofreezethird-partyaccessto CPNI.
h) Thenotificationwillstatethatanyapproval, ordenial ofapprovalfortheuseofCPNI
outsideoftheservicetowhichthecustomeralreadysubscribesfrom thecompanyis
valid untilthecustomeraffirmativelyrevokesorlimitssuchapprovalordenial.
i) Thecompany'ssolicitationforapprovalwill statethecustomer'sCPNI rights (defined in
47C.F.R. S:64.2001 to64.2011 etseq.).
12)Allofthe company'snoticesspecifictoOpt-Outoption will beprovided via electronicor
written notification.Thecompanywill notutilizepurelyoral notification.
13)Thecompanymustwaitaminimumof30 daysaftergiving customernoticeand an
opportunitytoopt-outbeforeassumingcustomerapprovalto use, disclose, orpermitaccess
toCPNI. Thecompanymay, in itsdiscretion, provideforalongerperiodfornotificationand
opportunityforopt-outoption.Thecompanydoesnotifycustomersastotheapplicable
waiting period forresponsebeforeapprovalis assumed.Thecompanyalsoabidesbythe
followingasfaras minimumwaiting period.
a) In caseswherethe companyutilizeselectronicnotification,theCompany'swaiting period
beginsto run fromthedatethatthe notificationwasmailed.
b) In the caseofnotification bymail, thewaiting period shall begin to run onthethirdday
followingthedatethatthenotificationwasmailed. -J..
Attachmentpage #3 ()
Attachment
Annual47C.F.R. S:64.2009(e)CPNI Certification
EBDocket06-36
Apollophone,Inc Form499FilerID: 828076
14)Thecompany'sopt-outmechanismwill providenoticestothecustomereverytwoyears.
15)Thecompany'se-mailbased opt-outnoticeswillcomplywith thefollowing requirements in
additiontotherequirementsgenerallyapplicableto notification:
a) Thecompanywillobtainexpress, verifiable, priorapprovalfrom thecustomertosend
noticesviae-mail regardingtheirservicein general,orCPNI in particular.
b) Thecompanywillallowcustomersto replydirectlytoe-mailsContaining CPNI noticesin
ordertoopt-out.
c) Opt-oute-mailnoticesreturned tothecompanyasundeliverablemustbesenttothe
customerin anotherformbeforethecompanymayconsiderthe customertohave
received notice.
d) Carriersthatusee-mailtosend CPNI noticesmustensurethatthesubjectlineofthe
messageclearlyandaccuratelyidentifiesthesubjectmatterofthee-mail.
e) Telecommunicationscarriersmustmakeavailabletoeverycustomeramethodtoopt-out
thatisofnoadditionalcosttothecustomerandthatisavailable24hoursaday, seven
daysaweek. Carriersmaysatisfythisrequirementthroughacombinationofmethods, so
longasall customers havetheabilitytoopt-outatnocostandareabletoeffectuatethat
choicewhenevertheychoose.
16) In termsofthecompany'sOpt-inmethod, thecompanywillprovidenotificationtoobtain opt-
in approvalthrough oral, writtenorelectronicmethods,with all such methodscomplyingwith
applicableitemslistedpriorin this attachment.
17)lnOne-TimeUseofCPNI, thecustomerrecognizesthatitmayuseoralnoticestoobtain
limited, one-timeuseofCPNI forinboundandoutbound customertelephonecontactsforthe
durationofthecall, regardlessofwhetherthecompanyuseopt-outoropt-in approvalbased
on the natureofthe contact. However, thecompanywill notutilizeoralconsentandassuch,
will utilizeeitherwrittenorelectronicnotificationand consentmethods.
18)Thecompanywillensurethatall notificationswill complywith the requirementslisted above
butrecognizesthatunderFCCCPNI rule, thecompanymayomitanyofthefollowing notice
provisionsifnotrelevanttothe limited useforwhich thecompanyseeksCPNI :
a) Undertheapplicable FCCCPNI rules, hecompanyrecognizesthatitwill notneedto
advisecustomersthatiftheyopted-outpreviously, noaction is neededto maintainthe
opt-outelection.
b) Thecompanyalsorecognizesthatitneed notadvisecustomersthattheymayshare
CPNIwiththeaffiliatesorthird partiesand need notnamethoseentities, ifthe limited
CPNI usagewill notresultin useby, ordisclosureto, an affiliateorthirdparty;
c) Thecompanyrecognizesthatitneed notdisclosethemeansbywhich acustomercan
denyorwithdrawfutureaccesstoCPNI, so long as thecompanyexplainsto customers
thatthescopeoftheapprovalthecarrierseeksislimitedtoone-timeuse.
d) Thecompanyrecognizesthatitmayomitdisclosureoftheprecisestepsacustomer
musttakein ordertograntordenyaccesstoCPNI, aslongasthecompanyclearly
communicatesthatthecustomercandenyaccessto his CPNIforthecall.
Attachmentpage #4