Data Brokers: Who Is Selling Your Information
Quick Take
Data brokers are companies that collect, package, and sell your personal information to advertisers, employers, and other businesses — often without your knowledge. While you can’t stop all data collection, you can significantly limit what’s available about you and remove your information from many of these databases. The process is simpler than most people think.
What This Actually Means for You
Data brokers are the middlemen of personal information. They gather details about your life — your address, phone number, shopping habits, income estimates, family members, and even your political preferences — then sell this data to anyone willing to pay for it.
Think of them as digital private investigators, except instead of working one case at a time, they’re building profiles on virtually every American adult. They pull information from public records (like property deeds and voter registrations), social media posts, loyalty card purchases, warranty registrations, surveys you’ve filled out, and thousands of other sources.
Here’s what makes this personal: when criminals want to steal your identity, they often start by buying information from these same data brokers. A scammer can purchase a detailed profile about you for just a few dollars, giving them enough information to sound convincing when they call pretending to be your bank, or to answer security questions on your accounts.
Parents should pay particular attention here. If your teenager has a social media presence or has filled out college applications, their information is likely being collected and sold. Seniors are also heavily targeted because their information tends to be widely available in public records and they’re often seen as more trusting of phone calls and mail offers.
The biggest misconception people have is thinking data brokers only sell information for marketing purposes. While targeted ads are certainly part of it, your information also goes to employers running background checks, insurance companies calculating your rates, landlords screening tenants, and unfortunately, criminals looking for their next target.
How It Works
Data broker operations work like a massive vacuum cleaner for personal information, followed by a sophisticated sorting and selling system.
The Collection Phase: These companies use automated tools to scrape information from public records databases, social media platforms, e-commerce sites, and surveys. They also purchase data from retailers, app developers, and other companies you’ve done business with. Every time you use a loyalty card, fill out a warranty form, or take an online quiz, that information often ends up being sold.
The Profile Building: Advanced algorithms combine all this scattered information to create detailed profiles. They don’t just know you bought dog food — they know you have a golden retriever, live in a house worth approximately $300,000, have two kids, and are likely interested in family vacations and pet insurance.
Here’s a real-world scenario: Sarah signs up for a grocery store loyalty card to save money on her weekly shopping. Six months later, she starts getting targeted calls from life insurance companies who somehow know she has young children and a mortgage. The connection? Her grocery purchases (baby food, school supplies) were sold to a data broker, who combined this with public property records showing her home purchase, then sold this profile to insurance marketers.
The Selling Phase: Your information gets packaged and sold in different ways. Sometimes companies buy broad categories (“homeowners in Texas with household incomes over $75,000”), and sometimes they purchase specific information about individuals for background checks or fraud verification.
How criminals exploit this: Identity thieves use data brokers as their research tool. They’ll buy basic information about potential targets, then use those details to sound legitimate when calling your bank or credit card company. They might know your address, your phone number, and that you recently moved — enough to convince a customer service representative to “help” them access your account.
Warning Signs to Watch For
You’re getting highly targeted scam calls or emails. If someone calls claiming to be from your bank and already knows your address, recent purchases, or family details you haven’t shared publicly, they likely bought your information from a data broker.
You receive pre-approved credit offers or insurance quotes you didn’t request that mention specific details about your life, like your estimated home value or the fact that you have teenage drivers.
Your personal information appears in online search results. Google your full name plus your city, and see what comes up. If you find detailed profiles on sites like WhitePages, Spokeo, or PeopleSearch that include your address, phone number, age, and family members, data brokers are actively selling your information.
You get marketing materials for products that match very specific aspects of your life — like ads for diabetes supplies when you’ve never publicly mentioned health issues, or college planning services right after your child turns 16.
Check these sources monthly:
- Search your name on major people-search sites
- Monitor your credit reports at AnnualCreditReport.com for unfamiliar inquiries
- Pay attention to the targeting of ads you see online and in mail
False alarms vs. real concerns: Getting general marketing mail isn’t necessarily a red flag — that’s normal business practice. The concern is when marketing becomes so specific that it’s clear someone has detailed information about your personal life, finances, or recent activities.
How to Protect Yourself
High-Impact Actions (Do These First)
1. Opt out of pre-approved credit offers. Call 1-888-567-8688 or visit OptOutPrescreen.com. This stops credit card companies from buying your information from the credit bureaus for marketing purposes. This single step eliminates a major source of data that feeds into broker databases.
2. Freeze your credit with all three bureaus. Visit each credit bureau’s website (Equifax, Experian, and TransUnion) and set up free credit freezes. A credit freeze locks your credit file so no one can open new accounts in your name, even if they have your personal information.
3. Remove yourself from major data broker sites. Start with the biggest players:
| Data Broker | Opt-Out Method | Time Required |
|---|---|---|
| Spokeo | Online form at spokeo.com/optout | 5 minutes |
| WhitePages | Online form in privacy section | 3 minutes |
| PeopleSearch | Email request to privacy contact | 10 minutes |
| BeenVerified | Online form with ID verification | 15 minutes |
4. Limit what you share publicly. Review your social media privacy settings and make your profiles private. Stop filling out warranty cards, surveys, and contest entries unless absolutely necessary.
Medium-Impact Actions
5. Use a separate email for shopping and signups. Create one email address specifically for retail purchases, newsletters, and account registrations. This contains the data collection to one channel you can monitor.
6. Pay cash for sensitive purchases. Items related to health, relationships, or personal challenges (pregnancy tests, relationship books, certain medications) should be purchased with cash when possible.
7. Remove yourself from voter registration public access where legally possible. Contact your local election office to ask about privacy options for your voter registration.
The 15-Minute Security Routine
Once monthly, spend 15 minutes on these checks:
- Google your name and address (5 minutes)
- Check one of your three credit reports (5 minutes)
- Remove yourself from any new people-search sites that appear (5 minutes)
When Paid Services Are Worth It
Free protections handle the basics for most people. Consider paid identity monitoring services if you:
- Have been a victim of identity theft before
- Have a high public profile
- Have experienced stalking or domestic violence
- Are going through a major life change (divorce, new job, relocation)
Paid services become overkill when you’re already following good basic security practices and haven’t experienced any warning signs of misuse.
What to Do If It Happens to You
Immediate Steps (First 24 Hours)
If you discover your information is being actively misused:
- Document everything. Screenshot any suspicious listings, save emails, and write down details of any suspicious phone calls.
- File a complaint with the FTC at IdentityTheft.gov. This creates an official identity theft report you’ll need for other steps.
- Contact your bank and credit card companies to alert them of potential fraud. Ask them to put fraud alerts on your accounts.
Who to Contact and When
Day 1-3: Credit Protection
- Place fraud alerts with all three credit bureaus (this only takes one call — the bureau you contact will notify the other two)
- Freeze your credit if you haven’t already
- Order copies of all three credit reports to check for unauthorized accounts
Week 1: Documentation and Reporting
- File a police report if you’ve discovered actual misuse of your information
- Contact any companies where fraudulent accounts were opened
- Begin the process of removing your information from data broker sites
Ongoing: Monitor and Follow Up
- Check your credit reports monthly for the next year
- Follow up with data broker removal requests (many require multiple attempts)
- Keep detailed records of all communications and actions taken
Key websites and phone numbers:
- FTC Identity Theft Report: IdentityTheft.gov
- Credit bureau fraud alerts: Call any one bureau, they’ll contact the others
- free credit reports: AnnualCreditReport.com
- Opt out of pre-approved offers: OptOutPrescreen.com or 1-888-567-8688
Recovery timeline: Removing your information from data broker sites can take 2-3 months of consistent effort. Credit-related issues typically resolve within 30-60 days. The key is persistence — many data brokers hope you’ll give up after the first attempt.
FAQ
How do data brokers get my information in the first place?
They collect it from public records (like property deeds and court filings), purchase it from companies you do business with, and scrape it from social media and other websites. Every loyalty card, warranty registration, and online survey feeds into their databases.
Is it legal for companies to sell my personal information?
Yes, it’s generally legal in most states, though some states like California have passed laws requiring companies to disclose what they’re collecting and allow you to opt out. The key is knowing your rights and exercising them.
Can I completely remove myself from all data broker databases?
You can significantly reduce your presence, but complete removal is nearly impossible since new information gets added constantly from public records and other sources. The goal is to make your information harder to find and less complete.
How often should I check for my information on these sites?
Monthly checks on the major people-search sites (Spokeo, WhitePages, PeopleSearch) will catch most problems. Set a monthly reminder to Google your name and see what comes up.
Will removing my information hurt my credit score?
No, removing your information from data broker sites won’t affect your credit score at all. These are completely separate systems from credit reporting.
What’s the difference between a credit freeze and opting out of data brokers?
A credit freeze prevents new accounts from being opened in your name, while opting out of data brokers reduces how much of your personal information is available for purchase. You need both for complete protection — they work together but serve different purposes.
Take Control of Your Information
Data brokers operate largely in the shadows, but you don’t have to be powerless against them. The most effective approach combines prevention with active monitoring — limiting what information gets collected about you while regularly checking for and removing what’s already out there.
Start with the high-impact actions: opt out of pre-approved credit offers, freeze your credit, and remove yourself from the major people-search sites. These three steps alone will dramatically reduce your exposure to both targeted marketing and identity theft attempts.
Remember, this isn’t a one-time task. New data broker sites appear regularly, and your information gets re-added to databases as you go about your normal life. Building these checks into a monthly routine makes the process manageable and keeps you protected over time.
The goal isn’t to become invisible — it’s to make your information harder to find and less complete when criminals come looking. Every step you take raises the bar and makes you a less attractive target.
For comprehensive protection that goes beyond what you can do manually, IdentityProtector.com provides continuous monitoring across data broker sites, immediate alerts when your information appears in new breaches or dark web marketplaces, and expert support to help you navigate identity theft recovery if the worst happens. While you’re taking control of your data broker presence, let us handle the ongoing surveillance and protection your identity deserves.
