The Data Broker Industry: Scale and Impact
Data brokers are companies whose entire business model is collecting personal information about individuals — without their knowledge or consent — and selling it to anyone willing to pay. They aggregate data from public records (property registrations, voter rolls, court documents, business licenses), social media profiles, purchase transaction histories, mobile app data, location tracking data, and other data brokers' databases. The result is detailed personal profiles that can include your name, current and historical addresses, phone numbers, email addresses, family members' names, income estimates, political affiliation, religious affiliation, criminal record searches, and more.
There are over 4,000 data broker companies worldwide. Major consumer-facing brokers — Spokeo, Whitepages, BeenVerified, Intelius, PeopleFinder, MyLife, Radaris, Acxiom, LexisNexis Risk Solutions — sell access to your profile for as little as $0.99 per lookup to anyone with a credit card. Corporate data brokers like Acxiom claim to have profiles on more than 2.5 billion consumers globally.
Real-World Consequences of Data Broker Exposure
This isn't an abstract privacy concern. Data broker exposure has concrete, sometimes serious consequences for real people:
- Physical safety risk: Your current home address, regular locations, and family members' names are findable by anyone willing to pay a few dollars. Domestic violence survivors, stalking victims, people with public-facing jobs, and anyone who has had conflict with others face genuine safety risks from this data being accessible.
- Doxxing campaigns: The practice of publishing someone's personal information online to enable harassment (doxxing) is trivially enabled by data broker sites. A disgruntled anonymous internet adversary can find your home address and phone number in under five minutes using these services.
- Identity theft facilitation: The combination of your name, address, date of birth, email address, phone number, and family information provides most of what identity thieves need to open fraudulent accounts, file false tax returns, or apply for credit in your name. When combined with leaked passwords from data breaches, the combination is particularly dangerous.
- Spam and unwanted solicitation: Your phone number and email address harvested from data brokers are sold to telemarketers, spammers, and political campaigns. This explains why you receive calls and emails from organizations you've never heard of or interacted with.
- Employment and reputational risks: Some data broker sites display inaccurate or out-of-context information — old criminal records that were expunged, incorrect associates, or misleading background summaries — that can appear in informal employer background checks.
How Data Brokers Collect Your Information
Understanding data sourcing helps explain why removal requires ongoing effort — brokers continuously re-collect data that you remove:
- Public records: Property ownership records, voter registration, court filings, business license registrations, marriage and divorce records — all public records that data brokers systematically harvest and database.
- Commercial data purchases: Retailers, subscription services, and loyalty card programs sell purchase transaction data to data brokers. Your shopping history, favorite stores, and purchase categories are tradeable commercial data.
- Social media scraping: Publicly visible social media profiles are scraped and incorporated into profiles, including profile photos, listed employers, relationship statuses, and location check-ins.
- Mobile location data: Many apps collect and sell precise GPS location data to data brokers. This can reveal your home address, work location, religious institution attendance, medical appointment visits, and daily routine.
- Inter-broker data sharing: Data brokers sell data to other data brokers. Removing yourself from one source may not prevent the data from being re-acquired from another broker's database.
How to Find Your Data Broker Profiles
Before submitting opt-out requests, you need to know where your information exists. Search for yourself systematically using multiple query formats:
- Your full name + current city and state
- Your full name + previous cities where you've lived
- Your phone number (search the number itself — many brokers list by phone)
- Your email address (some brokers aggregate email-based profiles)
- Variations of your name including maiden names or middle name variations
Document every profile you find with the exact URL. You'll need to submit individual opt-out requests to each one, and having the specific profile URL dramatically speeds up the process.
The Major Brokers: Opt-Out Process for Each
Each data broker has its own removal process. Here are the specific procedures for the most important ones:
- Spokeo: Search your profile → copy the exact profile page URL → go to spokeo.com/optout → paste the profile URL → enter your email address → verify via email link. Processing: 24-72 hours.
- Whitepages: Find your listing → click the "three dots" menu → "Remove me" → suppression form. Requires phone verification. Processing: 24-48 hours. Note: ironic that a privacy opt-out requires providing your phone number.
- BeenVerified: Use their opt-out page at beenverified.com/f/optout/email → enter your email to search → find your records → submit removal. Email verification required. Processing: 24-48 hours.
- Intelius: Navigate to intelius.com/opt-out → enter your name and state → locate your profile → submit removal request. Usually no verification required. Processing: within 24 hours.
- PeopleFinder: Go to peoplefinder.com/opt-out.php → search your name → select your record → submit opt-out with email address. Email verification required.
- MyLife: The most difficult removal process. Requires emailing privacy@mylife.com directly with your full name, state, and request to remove all records. May require follow-up emails. Processing: 30 days.
- Radaris: Find your profile → click "Control Your Information" → submit opt-out request. Email verification required.
- Acxiom: Submit a data request and opt-out at acxiom.com/about-us/privacy/data-protection-request-form/. Processing: up to 30 days. Particularly important as Acxiom sells to many other data brokers.
Automated Removal Services
Given the scale and ongoing nature of data broker removal, automated services have emerged to handle the process systematically. Services like DeleteMe, Privacy Bee, and Kanary monitor 100+ data broker sites continuously, submit opt-out requests on your behalf, and re-submit when profiles reappear. Annual subscriptions typically range from $100-200 per year. For most people with limited time, automated services provide significantly better ongoing coverage than manual opt-outs — which are frequently done incompletely and not maintained after the initial effort.
Complementary Privacy Measures
Data broker removal is most effective combined with upstream prevention: using a PO Box rather than your home address for public records; opting out of voter registration public disclosure where legally permitted; using privacy-protected domain registration for any domains you own; reviewing privacy settings on social media to minimize publicly searchable information; and avoiding loyalty card programs and surveys that harvest personal data for commercial sale. Prevention is always more efficient than remediation.
Realistic Expectations: Privacy as a Process, Not a Destination
Complete removal from all data broker databases is not achievable in a permanent sense. New brokers emerge, existing brokers re-collect data, and the regulatory environment in most countries does not provide enforceable rights to prevent initial collection from public records. The realistic goal is continuous reduction of exposure and rapid removal of profiles as they reappear — making you a harder target that requires more effort to research, rather than an impenetrable target. Combined with strong password hygiene, two-factor authentication, and awareness of social engineering tactics, reduced data broker exposure is a meaningful component of a comprehensive personal privacy strategy.