The U.S. significantly scaled back its post-9/11 security policy, curtailing surveillance of phone records. The NYT reports.