Where Data Brokers Get Your Information

Data brokers don't hack into your accounts. They pull information from sources that are, technically, already available to the public or shared through everyday transactions. Understanding those sources makes the whole system less mysterious.

Common data sources include:

  • Public records — court filings, property deeds, voter registration, and marriage or divorce records filed with government agencies
  • Retail loyalty programs — every time you swipe a rewards card, purchase history may be shared or sold
  • Social media profiles — publicly visible bios, posts, and connections are fair game for scraping
  • Online surveys and sweepstakes — many of these exist primarily to harvest contact details and preferences
  • Financial and credit-adjacent data — income ranges and general creditworthiness indicators sourced from permitted partners

Brokers then cross-reference these inputs to build surprisingly detailed profiles. Everyday oversharing habits — like listing your hometown and employer on a public social profile — can accelerate how quickly that profile fills in.

Public Records Are Harder to Remove

Court records, property ownership, and voter registration data are maintained by government agencies and are generally considered public information. While data brokers can be asked to remove these from their databases, the underlying government records themselves remain accessible. Opting out of a broker does not expunge public records at their original source.

What a Typical Data Profile Looks Like

If you were to view the profile a data broker holds on you, it might resemble a surprisingly thorough dossier. Depending on the broker and its business focus, your file could contain:

  • Full name, current and previous addresses, phone numbers
  • Estimated household income and net worth bracket
  • Names of relatives, neighbors, and roommates
  • Vehicle ownership records
  • Health interest categories (inferred from browsing or purchase patterns, not medical records)
  • Political affiliation and donation history
  • Hobbies, lifestyle segments, and buying habits

This data doesn't just sit idle. It's sold to marketers, background-check companies, insurers, employers, and in some cases individuals willing to pay for a people-search report. For a broader look at how digital data collection works across your everyday devices, see our complete online privacy starter guide.

4,000+

Estimated number of data brokers operating in the U.S.

Privacy advocacy organizations and industry analysts have estimated the U.S. data broker industry includes several thousand companies, ranging from large consumer-data platforms to niche specialty firms.

$300B+

Estimated annual U.S. data broker industry revenue

Multiple market research analyses have placed the total U.S. data brokerage market in this range, reflecting the scale of commercial demand for consumer data.

~100+

Brokers requiring individual opt-out requests

Consumer privacy researchers have documented that dozens to over a hundred major brokers each maintain their own separate opt-out processes, with no unified removal mechanism.

How the Opt-Out Process Works

The good news: most data brokers are required — either by law or by industry self-regulation — to offer an opt-out mechanism. The less good news: there is no single universal opt-out. You generally have to contact each broker individually.

Here's how the process typically works:

  1. Search for your listing. Visit the broker's website (or use a people-search engine) and look up your name to confirm a profile exists.
  2. Locate the opt-out page. Most brokers bury this in a footer link labeled "Do Not Sell My Information," "Privacy Request," or "Opt Out."
  3. Submit a removal request. You may need to provide your name and address to identify your record — ironic, but necessary. Some brokers require email verification.
  4. Wait for confirmation. Processing times vary from 24 hours to 45 days, depending on the broker and applicable state law.
  5. Follow up. Check back after a few weeks to confirm the listing has been removed.

Use a Dedicated Email for Opt-Out Requests

Create a separate email address specifically for submitting data broker removal requests. This keeps confirmation emails organized and prevents your primary inbox from being associated with yet another data source. It also makes it easy to track which requests have been completed.

Keep a simple spreadsheet tracking which brokers you've contacted, the date of your request, and whether removal was confirmed. This log is invaluable when you repeat the process in a few months.

Tightening your social media privacy settings in parallel helps slow the re-collection of your data. Our guide to social media privacy settings walks through the major platforms step by step.

Limitations to Know Before You Start

Opting out is worthwhile, but it helps to go in with realistic expectations. A few important constraints:

  • It's ongoing work. Public records are updated continuously. Brokers can re-add you after removal when new data becomes available. Most privacy researchers suggest re-checking every three to six months.
  • Coverage depends on your state. Residents of states with comprehensive privacy laws (such as California) have stronger legal grounds for requesting deletion and receiving timely responses. In states without such laws, brokers may be slower or less responsive.
  • Not all brokers are consumer-facing. Business-to-business data brokers that serve employers and insurers may not have simple consumer opt-out portals, making removal harder to accomplish directly.
  • Smart home devices can add new data streams. If you use connected devices at home, they may contribute behavioral data that eventually reaches broker networks. Our smart home privacy guide explains what's being collected and how to limit it.

No single action eliminates your data footprint entirely, but systematically opting out of major brokers meaningfully reduces your exposure — and that's a reasonable, achievable goal for most people.