What Are Data Brokers? How They Collect and Profit From Your Data

A data broker is a company that collects personal information about you from public records, online activity, and other companies, then compiles it into a profile it sells — usually without ever having interacted with you directly. If you’ve ever searched your own name and found a listing on a site you never signed up for, showing your age, address, relatives, and phone number, you’ve met a data broker.

How Data Brokers Collect Your Information

• Public records. Property deeds, voter registrations, marriage licenses, and court records are public by design; brokers scrape them at scale.
• Purchased data. Retailers, apps, and websites sell customer data as a secondary revenue stream — often disclosed only in the fine print of a privacy policy few people read.
• Social media scraping. Public posts, tagged photos, and profile details get pulled automatically, even from accounts with otherwise reasonable privacy settings.
• Data broker-to-broker sales. Brokers buy from each other constantly, which is why removing yourself from one site rarely stops your information from reappearing on another.
• Loyalty programs and warranty cards. Small, seemingly harmless data points get aggregated with everything else into a single profile.

What Data Brokers Actually Know About You

A typical broker profile can include: full name and past names, current and former addresses, phone numbers, email addresses, age and birth date, relatives and known associates, estimated income bracket, property ownership, court records, and in some cases, inferred interests and habits built from purchase and browsing history. Individually, most of these facts aren’t secret. Combined into one profile and made instantly searchable, they become something categorically more useful to a scammer, stalker, or identity thief than any single piece on its own.

The Data Broker Industry, in Plain Terms

This is a large, established, and mostly legal industry — not a fringe operation. It includes household names like Spokeo, BeenVerified, Whitepages, Intelius, MyLife, and PeopleFinders, alongside hundreds of smaller, less visible aggregators most people never encounter directly by name. Their business model is straightforward: sell access to personal profiles to background-check services, marketers, and the general public, usually through a subscription or per-report fee. Because most operate legally by aggregating already-public or already-sold information, opting out is possible — but it has to be done broker by broker, since there’s no single master switch.

Why This Matters for Consumers

Data broker exposure isn’t an abstract privacy inconvenience — it’s a direct input into real harm. Identity thieves use broker profiles to answer security questions (“what street did you grow up on”) that banks still rely on. Scammers use them to sound credible on the phone. Stalkers and abusive ex-partners use people-search sites to find a new address within days of a move. The exposure itself isn’t illegal in most cases — which is exactly why it’s on the individual to opt out, rather than something that gets resolved automatically.

Your Opt-Out Rights by State

Your formal rights depend on where you live. California’s CCPA, and similar laws in Virginia, Colorado, Connecticut, and a growing list of other states, generally require data brokers to honor requests to access, delete, or stop selling your information — usually through a specific opt-out form each broker is required to provide. Coverage and exact requirements vary by state, so it’s worth confirming your state’s specific law rather than assuming a broker is required to comply if you live somewhere without one of these statutes. Even without a legal mandate, most major brokers offer a voluntary opt-out process — it’s just often slower and less prominently advertised.

Common Mistakes People Make Opting Out

1. Opting out of one site and assuming the problem is solved. There are hundreds of brokers; one opt-out removes one listing, not your exposure generally.
2. Not saving confirmation of the opt-out request. If a listing reappears, you’ll want proof you already requested removal.
3. Using a fake name or scrambled information to “confuse” brokers. This can actually violate a broker’s terms of service and make legitimate removal harder, not easier.
4. Never checking again. Brokers re-aggregate data from other sources; a listing removed today can reappear in 3–6 months.

How to Find Out Which Brokers Have Your Data

Start with the sites people actually search: Google your own full name alongside your city and state, then check Spokeo, Whitepages, BeenVerified, and MyLife directly by searching your name on each. This manual process is free but genuinely tedious — it can take several hours to search, request removal from, and later re-check even a modest list of major brokers, and most people don’t keep it up over time. That gap is exactly what identity-monitoring and data-removal services are built to close: instead of manually re-checking dozens of broker sites, a service like Omni DataSafe continuously monitors and files removal requests on your behalf, which is worth considering if the manual process feels like more than you can realistically keep up with — not a requirement, just a legitimate option for people who’d rather not do it by hand every few months.

Frequently Asked Questions

Is it illegal for data brokers to sell my information?

In most cases, no — brokers generally operate legally by aggregating information that’s already public or that was legitimately sold to them. This is exactly why opting out is on you rather than something that happens automatically or that you can report as a violation.

How many data brokers are there?

Estimates vary, but the honest answer is: more than any one person can realistically track individually, ranging from a handful of major, well-known people-search sites to hundreds of smaller aggregators most consumers never encounter by name.

Can I sue a data broker for having my information?

Simply having your information generally isn’t grounds for legal action, since most of it is drawn from public or legitimately purchased sources. Specific state privacy laws do create enforceable rights to request deletion, and failing to honor a valid opt-out request can carry consequences under those laws.

Do data broker opt-outs actually work?

Yes, for the specific listing you opted out of — but re-aggregation from other sources means a listing can reappear later, which is why this works best as an ongoing process rather than a single pass.

Will opting out of data brokers stop robocalls and spam texts?

It can reduce them over time, since brokers are one source scammers and telemarketers pull contact information from, but it won’t eliminate every source — some numbers get harvested through other means entirely.

Is there a free way to remove myself from all data brokers at once?

Not currently — there’s no single master opt-out that covers every broker, which is the core reason both manual checklists and paid removal services exist as two different ways to approach the same underlying problem.

What information can’t be removed from data brokers?

Genuinely public records — property deeds, court filings, voter registration in states where it’s public — generally can’t be fully suppressed, since brokers are legally entitled to republish public government data.

How is a data broker different from a company I actually gave my information to?

A company you did business with collected your data directly, usually through some form of consent. A data broker typically never interacted with you at all — see our What Is Digital Privacy? guide for the fuller distinction between direct collection and third-party aggregation.