Every record starts from a real city. The region, the postal code, the telephone area code and the coordinates are all derived from that one choice, so the fields agree with one another the way a real address's fields do — rather than being drawn independently, which is how a generator ends up pairing a California city with a Michigan postal code.
United States postal codes come from the GeoNames postal dataset, published under CC BY 4.0, restricted to the codes attributed to that city and then filtered to those that take ordinary residential street mail. The filter is derived from public postal and census signals rather than licensed from the Postal Service's own delivery-type file, so it is deliberately conservative: it will drop some codes that do in fact receive street mail, which is the safer direction for a fixture.
The street name comes from a generic street-name pool rather than that city's real streets, and the house number is random between 1 and 9989. Nothing about the address is intended to resolve to a building, and that is the property that makes it safe to keep in a repository. Telephone area codes come from the same city's rate centre in the North American plan, so the phone number does not contradict the address.
The rules are enforced by tests: a postal code a city page emits must appear in that city's real list, a state page's code must fall within that state's documented ranges, and a code that takes no ordinary street mail may not appear in any pool, with two dozen verified examples pinned by name so the filter cannot silently stop working.