Data brokers are companies that collect personal information, such as your name, address, phone number, relatives, and property records, and package it for sale or public search. Many operate "people search" sites that anyone can use to look up a stranger's address for a few dollars. You almost certainly never signed up for any of this; the data comes from public records, data breaches, app permissions, and purchases from other brokers.
What changed in 2026
- More states passed data broker registries and opt-out laws, following California and Vermont, which require brokers to register and, in some cases, honor a single statewide opt-out request.
- A handful of states rolled out "one-click" deletion mechanisms modeled on California's Delete Act, though coverage still varies significantly by state and does not include every broker.
- Broker consolidation continued, meaning fewer, larger companies now hold a bigger share of the data, which paradoxically makes broad opt-out slightly more tractable than it was when hundreds of small sites existed independently.
- AI-powered scraping expanded the data brokers collect, pulling in more from social media and public forums than in prior years.
How data brokers get your information in the first place
Public records are the biggest source: property deeds, voter registrations, court filings, and marriage licenses are all public by design and legal to collect. Beyond that, brokers buy data from other brokers, from apps that sell location and usage data, and from loyalty programs and warranty registrations that bury data-sharing clauses in their terms. None of this requires your active consent beyond agreeing to some app's terms of service years ago.
The opt-out process, realistically
There is no regulator-run master list that removes you from every broker with one request. The practical process looks like this:
- Search your name on the major people-search sites — Spokeo, Whitepages, BeenVerified, MyLife, and similar — to see what is currently listed.
- Find each site's opt-out page, usually buried in the footer as "do not sell my info" or "privacy," and submit a removal request per site.
- Verify by email or phone as required; some sites deliberately make this step tedious to discourage removal.
- Repeat periodically. Data resurfaces as brokers repurchase compiled datasets from each other, typically within 3-6 months.
DIY opt-out vs paid removal services
| Approach |
Time cost |
Money cost |
Coverage |
| DIY, broker by broker |
High, ongoing |
Free |
As thorough as your effort |
| Paid removal service (subscription) |
Low |
Recurring fee |
Covers a large but not complete list of brokers |
| State-level one-click deletion (where available) |
Low |
Free |
Only brokers registered in that state |
Paid services are not doing anything magical — they automate the same opt-out requests you could file yourself, on a recurring schedule, across a broader list of brokers than most people would bother tracking manually. Whether the subscription cost is worth it depends entirely on how much your time is worth to you; verify current pricing yourself before subscribing, since it changes.
What opt-out does not fix
Removing yourself from data broker listings does not undo a past data breach, does not remove information from search engine caches instantly, and does not stop new brokers from scraping fresh public records after you have opted out of the old ones. It also has no effect on information you have posted publicly yourself, on social media or elsewhere.
FAQ
Is it legal for data brokers to sell my information?
In most of the US, yes, when the underlying data comes from public records or legally obtained sources. Some states now require registration and opt-out mechanisms, but outright banning the practice is rare.
How long does an opt-out request take to work?
It varies by broker, from a few days to several weeks. Sites are not required to confirm removal, so checking back manually is the only way to know it worked.
Will opting out stop robocalls and spam?
Only partially. Some spam originates from broker-sold phone numbers, but plenty comes from other sources entirely, so do not expect opt-out alone to eliminate it.
Do I need to opt out again after using a paid removal service?
Usually the service handles recurring requests automatically as data resurfaces, which is the main value of paying for it over doing it manually.
Where to go next