Data Brokers: The Industry That Sells Your Personal Information

Where Data Brokers Get Their Information

Data brokers feed on information that is already out in the open — or that you've handed over without realizing it. Their sources fall into a few broad categories.

• Public records: Property deeds, voter registrations, court filings, marriage and divorce records, and motor vehicle data are all legally accessible and routinely harvested.
• Online activity: Browsing data purchased from app developers, website trackers, and advertising networks builds a picture of your interests and habits. This is one reason your digital footprint matters far beyond a single website visit.
• Loyalty programs and retail data: Every time you use a store rewards card, you generate a purchase record that retailers can sell.
• Social media: Publicly visible profiles — your name, employer, location, photos, and connections — are scraped and incorporated into profiles.
• Data purchased from other brokers: Brokers buy and trade data among themselves, meaning a single piece of information can propagate through dozens of companies.

What Your Data Broker Profile Looks Like

A typical consumer profile is surprisingly detailed. A broker might combine your name and address history with estimated household income, the make and model of your car, your approximate net worth, inferred political views, and a list of product categories you've purchased. Some brokers append health-interest scores — inferring from your purchases or search behavior that you may be interested in certain medical topics.

This aggregated picture is what makes data brokers different from, say, a single website that knows your email address. No individual source is particularly revealing. Combined, they create a profile that can predict behavior, flag vulnerabilities, and enable highly targeted outreach — not all of it benign.

It's worth understanding how this overlaps with your formal financial record. Unlike the profiles data brokers sell, your credit report is regulated and comes with federally guaranteed rights to review and dispute.

Who Buys This Data and Why

The customer list for data broker services is long and varied. Marketers use consumer profiles to target ads. Landlords and employers run background checks. Political campaigns buy voter data to micro-target messaging. Insurers assess risk. Private investigators locate individuals. And, perhaps surprisingly, law enforcement agencies have purchased access to location data and other records without obtaining a warrant — a practice that has drawn significant legal scrutiny.

“The data broker industry largely operates in the shadows. Most Americans have no idea these companies exist, let alone that they are being profiled and that their information is being bought and sold without their knowledge or consent.”

— Pam Dixon, Executive Director, World Privacy Forum

The breadth of buyers is part of what makes this industry consequential. Data collected for one purpose — say, a loyalty card program — can end up informing a decision you never anticipated, such as whether a landlord accepts your rental application.

Understanding which apps have access to your personal data upstream is equally important. Our look at apps accessing your contacts explains how that data can flow outward from your phone.

How to Opt Out and Reduce Your Exposure

There is no single switch that removes you from all data broker databases. The opt-out process is intentionally fragmented — each company runs its own removal procedure, and some make it deliberately cumbersome. That said, you do have options.

1. Start with the largest brokers. Companies like Acxiom, LexisNexis, Spokeo, WhitePages, and Intelius each have opt-out portals. Prioritizing the biggest players limits your immediate exposure.
2. Use your state's legal rights. If you live in California, Virginia, Colorado, or several other states, privacy laws give you a formal right to request data deletion. Brokers operating in those states must honor valid requests.
3. Consider an opt-out service. Third-party services submit removal requests on your behalf across dozens or hundreds of brokers. Evaluate any such service carefully — some are more thorough than others, and none can guarantee permanent removal.
4. Reduce data at the source. Opting out of loyalty programs, using a private browser, and reviewing app permissions limits what brokers can collect going forward. A full online privacy audit can help you identify your biggest exposure points.

For a broader view of how personal data travels across the internet and what rights Americans currently hold, see our guide to internet privacy from end to end.