A data broker is a company that collects personal information from public records, online activity, purchase history, and other sources, then packages and sells it to anyone willing to pay. Most people haven't heard of the specific companies holding their data, but these brokers often have your name, home address, phone number, email, and employer on file. The data broker industry generates an estimated $200+ billion in annual revenue according to industry analyses, and removing your information from these databases is the most direct way to limit your exposure.
How data brokers collect and sell your personal information
Data brokers don't hack into your accounts. The collection process is quieter and more pervasive than that. Your information flows into broker databases from sources you interact with every day, often without realizing your data is being harvested.
Public records and government databases
Every time you register to vote, buy property, get married, file for a business license, or appear in a court record, that information becomes part of the public record. Data brokers systematically scrape these government databases and compile the results. Your name, address, age, and property ownership details are typically available without any legal barriers.
App permissions and online activity
Mobile apps frequently request permissions far beyond what they need to function. A flashlight app asking for access to your contacts and location is harvesting data for resale. Websites embed tracking pixels, cookies, and third-party scripts that follow your browsing activity across the internet. Loyalty programs, sweepstakes entries, and free Wi-Fi signups all funnel data into broker pipelines.
Imagine you download a coupon app to save a few dollars at the grocery store. The app collects your purchase history, location data, and the email address you signed up with. Within weeks, that information appears on people-search sites, bundled with everything else brokers already know about you.
Data breaches and leaked databases
When a company you've signed up with gets breached, your credentials and personal details often end up for sale on dark web marketplaces. Data brokers don't buy from the dark web directly, but breached data eventually circulates into aggregation pipelines. A single breach can add your email, password, phone number, and security question answers to profiles that brokers are already building from other sources.
Purchase history and financial data
Credit card transaction data, retail loyalty programs, and e-commerce purchase records provide brokers with a granular picture of your spending habits, income level, and lifestyle preferences. Some brokers specialize in financial profiling, selling data to insurance companies, lenders, and marketers who use it to make decisions about you.
Who buys data from data brokers?
The buyers span a wide range. Advertisers and marketing firms purchase profiles to target you with personalized ads. Background check companies and people-search sites resell your data to anyone who searches your name. Scammers and identity thieves use broker data to build profiles for phishing attacks, SIM swaps, and social engineering. Legitimate businesses use broker data for market research and customer acquisition, often without knowing how the data was originally collected. The lack of transparency is the point, since most brokers operate without any direct relationship to the people whose data they sell.
How to reduce the risk (what actually works)
You can't opt out of public records entirely, but you can reduce how much of your information is easily accessible and profitable to collect.
- Submit opt-out requests to major data broker sites
Sites like Spokeo, Whitepages, BeenVerified, and PeopleFinder all have opt-out processes, though each one is different and requires individual submissions. The FTC provides guidance on how to approach these requests at consumer.ftc.gov.
- Audit app permissions on your phone
Go through your installed apps and revoke permissions for contacts, location, and microphone access on anything that doesn't genuinely need them. Delete apps you no longer use.
- Use separate credentials for different account types
When every signup uses a unique email address and phone number, brokers have a harder time stitching your activity into a single unified profile. Compartmentalization limits the depth of the profile anyone can build on you.
- Limit what you share on social media
Brokers scrape public social media profiles for personal details. Tightening your privacy settings and avoiding posting your phone number, birthday, or employer publicly reduces the raw material available.
- Be selective about loyalty programs and free services
Every loyalty card, rewards app, and "sign up for a free gift" form is a data collection mechanism. Weigh the benefit against the information you're trading for it.
Frequently asked questions
Q. How do data brokers get my information?
Data brokers pull from public records (voter registration, property records, court filings), app data and online tracking, purchase history from retailers and loyalty programs, social media profiles, and leaked breach databases. Most of the collection happens passively, without any direct interaction between you and the broker.
Q. Can I make data brokers delete my data?
Yes, most data brokers are required to process opt-out requests, and some states (including California and Vermont) have laws specifically governing broker data practices. However, the process is manual, each broker has its own opt-out procedure, and brokers frequently re-collect your information after removal. Automated removal services handle the submissions and re-monitoring for you.
Q. Can data brokers see my browsing history?
Data brokers don't typically access your browsing history directly, but they can get close. Third-party tracking scripts embedded in websites, apps that share usage data with analytics firms, and ad networks that follow you across sites all feed behavioral data into broker profiles. Using a VPN and limiting app permissions can reduce how much of your activity reaches these pipelines.
Q. How many data brokers have my information?
The average American's personal data appears on dozens to hundreds of data broker sites. A free safety scan can show you how many sites currently hold your information and what data they've collected.
Q. Are data brokers legal?
In most of the U.S., data brokerage is legal and largely unregulated at the federal level. Some states have enacted data broker registration laws (Vermont and California), and consumer privacy laws like the CCPA give residents the right to opt out of data sales. Federal privacy legislation covering data brokers has been proposed but not yet enacted as of 2026.
