The 911 call data was for an address, he likely linked said address to tax data to get the property owner then did LinkedIn search. Additionally could have used arrest data. 911 and arrest in my city don’t have names but by linkage via methods named it’s possible.

At most he used a radius for the 911 call to check possible names, and had a contact at SFPD or the courts to confirm once he had a name.