Orgs have been busted before. And when an org is busted, particularly for human trafficking / federal crimes, they execute a search warrant for phones, computers, laptops, hard drives, storage media, phone records, financial records, also freeze business and personal bank accounts.
It isn't a question of revealing customer information, the information is confiscated. Typically though, feds don't give a shit about you, unless you have a warrant or something.
But why do you not answer the question.. what is the scenario where the need for this info goes away after one visit?