Data brokers are companies whose entire business model is collecting, aggregating, and selling information about you — your name, home address, phone numbers, email addresses, relatives’ names, employment history, and much more — without your knowledge or direct consent. These profiles are sold to marketers, background check services, people-search sites, insurance companies, and to anyone with a credit card and internet access. This fits into the wider topic we cover in our Complete Guide to Security and Privacy.
Stopping data brokers from profiting from your personal information is achievable, but it requires systematic effort and ongoing maintenance. The goal isn’t complete elimination (that’s not realistic) — it’s removing the detailed profiles from the largest and most harmful brokers and reducing the upstream data flow that allows profiles to repopulate.
Why data broker profiles are a security problem, not just a privacy annoyance
The information data brokers sell is the raw material for attacks you might not immediately connect to them:
- Social engineering: when a scammer calls claiming to be from your bank and correctly names your address and recent accounts, they likely purchased your profile from a data broker. SIM swap attacks are enabled by the combination of phone number, address, and account PIN that brokers aggregate.
- Doxxing: a determined person who wants your home address needs only a few minutes and a small payment to a people-search site to obtain it. Home address information specifically is the link between online presence and physical location.
- Targeted scams: knowing your age, income estimates, home value, and recent life events (moves, divorces, bereavements) allows scammers to craft extremely targeted pitches — predatory financial products timed to life transitions, grief-targeting scams after bereavement, elder fraud when age is flagged.
- Spear-phishing: personalised phishing emails that address you by name, reference your employer, and mention your city are assembled from data broker profiles combined with social media scraping.
Physical safety for people who face harassment online — activists, journalists, domestic violence survivors, public-facing professionals — depends substantially on removing home address information from broker databases. For most people, the most acute concrete benefit of broker removal is reduced scam calls, reduced spam, and removed information that enables social engineering attacks.
The step-by-step manual opt-out process
- Search for your profiles. Search your full name plus city on Google and on the major people-search sites: Spokeo.com, Whitepages.com, Intelius.com, BeenVerified.com, and Radaris.com. Document every profile found — the exact URL, what information is shown, and the site name. This becomes your working list.
- Submit opt-out requests to each site. Navigate to each site’s opt-out page (usually found by searching “[site name] opt-out”). Submit the removal request — most require an email address and confirmation link. Some require submitting a photo ID to verify identity before removal.
- Use a dedicated email address for opt-outs. Create a separate email address for all data broker opt-out submissions. This prevents your primary email from being added to new lists from the confirmation emails, keeps all correspondence organised, and limits cross-linking between the opt-out identity and your primary email.
- Use a PO box or mail forwarding address when forms require a current address. Submitting your real home address to opt-out forms can seed new profiles with a current confirmed address. A PO box or mail forwarding service address provides verification without confirming your home to new databases.
- Set quarterly calendar reminders to re-submit. Data broker profiles repopulate from new public records. The opt-out is not permanent — it removes the current profile, but new data creates new profiles. Quarterly resubmission is the maintenance cadence that keeps the exposure managed.
The priority opt-out targets: sites appearing in search results for your name first (most visible), then Spokeo, Whitepages, Intelius, BeenVerified, PeopleFinder, Radaris, and MyLife — these are among the largest and most commonly accessed by third parties. Each opt-out takes 5–15 minutes; the complete first pass through major brokers takes 3–5 hours — a significant but one-time investment. Each subsequent quarterly review takes 1-2 hours as most profiles won’t have fully repopulated.
Automated removal services — when the manual approach isn’t sustainable
Automated removal services submit opt-out requests on your behalf continuously, monitor for profile repopulation, and resubmit when profiles return. They typically cover 50–750 broker sites depending on the service and tier.
| Service | Brokers covered | Annual cost (individual) | Notes |
| DeleteMe | ~750 | ~$129 | Oldest and most established; detailed removal reports |
| Privacy Bee | 200+ | ~$197 | Broader scope; higher cost |
| Kanary | 200+ | ~$120 | Focuses on real-time monitoring and resubmission |
| Optery | 200+ | Free tier / ~$50-149/yr | Free tier covers some brokers manually with guidance |
For most users, the annual cost of a removal service is justified by time savings alone — a service handling 150+ brokers continuously is worth several hours of quarterly manual work, particularly if the manual approach was being skipped due to time constraints.
Even with an automated service: handle Spokeo.com, Whitepages.com, and MyLife.com manually and verify removal yourself. These are the most visible in search results for your name and warrant personal confirmation that the profile is actually absent, not just that an opt-out was submitted.
Reducing upstream data — limiting what brokers can aggregate
The most effective long-term approach is reducing the amount of information that enters the data ecosystem in the first place. Data brokers aggregate public records, social media data, purchase history, and loyalty program data. Reducing what you share with these sources reduces what brokers can aggregate.
- Public records: court records, property records, voter registration records, and business license records feed directly into broker databases. Where possible, opt out of voter registration public display (available in some states), use a registered agent service instead of your home address for public-facing business registrations, and use a PO box or mail forwarding address for any public-record-generating activity.
- Email and phone number sharing: use email aliases (SimpleLogin, AnonAddy) for new signups, provide a Google Voice or VoIP number rather than your mobile number for optional phone fields, and decline loyalty program sign-ups requiring real contact information. Every real email address and phone number provided to a service may eventually reach a data broker through the service’s own data monetisation practices.
- Social media profiles: restrict public profile information to non-identifying details. Employer, home city, education, and relationship status are all data points that brokers incorporate into profiles. Our guide on protecting social media privacy covers the platform-specific settings.
Our guide on protecting your online identity covers the broader identity protection strategy of which data broker removal is one key component. For EU and UK residents exercising GDPR rights against data brokers, the UK ICO’s erasure request guidance covers the process for submitting Article 17 erasure requests and the timeframes brokers must comply with.
Legal rights by jurisdiction
Legal rights to compel data broker removal vary significantly by jurisdiction:
- EU and UK residents (GDPR): the strongest legal rights globally. Every data broker holding information on EU/UK residents must provide a straightforward process to access and delete personal data, respond within 30 days, and faces significant fines for non-compliance. Submit a Subject Access Request (SAR) followed by an Erasure Request using the email contact on the broker’s privacy policy page. Including “Article 17 GDPR Erasure Request” in the subject line signals legal familiarity and typically accelerates response.
- California residents (CCPA/CPRA): the right to know what data is held, the right to request deletion, and the right to opt out of the sale of personal information. California residents can invoke these rights against brokers operating in California.
- Other US states: Virginia, Colorado, Connecticut, Texas, Montana, and several other states have passed consumer data privacy laws with deletion rights.
- All US residents: submit a complaint with the FTC (ftc.gov) against brokers that refuse opt-out requests in states with applicable privacy law — a documented escalation pathway.
After a move — an especially important time to opt out
Every address change seeds new data into broker databases. When you move, the combination of lease records, utility service setup, voter registration update, and address change notifications creates a fresh cluster of linked records that brokers aggregate into an updated profile.
To limit how quickly profiles rebuild after a move: minimise the number of entities that receive your new home address. Use a mail forwarding service or PO box for non-essential services, update voter registration through any available privacy-protective options, and request that utility companies treat your address as sensitive on the account record. Starting the opt-out process immediately after any move — before new profiles fully consolidate — limits the window during which the new address is publicly associated with your identity.
Stopping data brokers from maintaining your detailed profiles is a sustained effort rather than a one-time fix. The realistic outcome of systematic opt-out combined with upstream data minimisation is not complete removal from all databases — it’s removal from the profiles that enable the most concrete harms: the home address that enables doxxing and physical targeting, the phone numbers that enable smishing and SIM swap attacks, and the aggregated detail that enables convincing social engineering. That reduction in exposure produces measurable and tangible benefits in the form of fewer scam calls, less targeted spam, and removed social engineering leverage.
The major data brokers — opt-out links and process notes
| Broker | Opt-out page | Process notes | Re-check timing |
| Spokeo | spokeo.com/opt-out | Email confirmation required; takes 24–48 hours | Every 3 months |
| Whitepages | whitepages.com/suppression-requests | Phone verification required; takes up to 14 days | Every 3 months |
| Intelius | intelius.com/opt-out | Online form; 24–48 hours; can request removal of all related profiles | Every 3 months |
| BeenVerified | beenverified.com/opt-out | Email verification; 24 hours | Every 6 months |
| Radaris | radaris.com/page/optout | Account creation required; allows removal of specific records | Every 3 months |
| MyLife | mylife.com/ccpa/index.pubview (or email) | Requires contacting support; one of the more difficult removals | Every 3 months |
| PeopleFinder | peoplefinders.com/manage | Email verification required; account creation for removal management | Every 6 months |
| Acxiom | aboutthedata.com | Create account; opt out of specific data elements; useful for marketing data | Annually |
Bookmark the opt-out URL for each broker you’ve submitted to, rather than navigating through the search results each time — broker websites change their opt-out page locations periodically, and direct bookmarks to the opt-out pages are faster to use during quarterly resubmission sessions.
Data broker removal for high-risk individuals
For individuals who face elevated risk — journalists, activists, domestic violence survivors, public figures, healthcare workers, law enforcement, or anyone who has experienced stalking or harassment — data broker removal is a safety measure rather than a convenience preference. The National Network to End Domestic Violence offers the Safety Net project, which provides specific data broker removal guidance for survivors of abuse. Most removal services offer discounted or subsidised access for high-risk individuals in documented situations.
For high-risk individuals: manual removal from every major broker is worth the time investment regardless of whether an automated service is also used. The combination of personal verification that profiles are actually removed, use of a PO box for all future address associations, and complete social media privacy lockdown addresses the three primary pathways through which home addresses reach data broker databases and ultimately enable physical targeting. See also Data Loss Prevention for a related case.
The realistic outcome worth calibrating expectations around: data broker removal reduces your exposure but doesn’t eliminate it. Public records are public by definition, and determined adversaries with time and money can reconstruct information from multiple sources even after removal from the commercial broker databases. What removal eliminates is the frictionless, immediate, cheap access to aggregated profiles — replacing “a few dollars and two minutes” with “significant effort and cost” as the barrier for anyone seeking your information. For most threat models, that barrier increase is meaningful and worth the effort to establish and maintain. You might also run into Biometric Data Privacy.
