Private firm may track all email and calls