Where Data Brokers Get Your Information

Data brokers don't hack your accounts — they mostly don't need to. The information they collect is drawn from sources that are publicly available or commercially accessible, often without you ever knowing a transaction occurred.

Key sources include:

  • Public records: Property deeds, voter registration rolls, court documents, marriage and divorce records, professional licenses, and bankruptcy filings are all fair game in most states.
  • Retail and loyalty programs: When you use a store loyalty card or shop online, retailers often sell aggregated or individual purchase data to brokers. Those grocery reward points come with a cost.
  • Mobile apps: Free apps frequently fund themselves by sharing location data, device identifiers, and usage patterns with third parties, including brokers. This happens even when the app's core function has nothing to do with data collection.
  • Social media activity: Publicly visible posts, check-ins, likes, and group memberships contribute to profiles. Even private activity can be inferred from public signals.
  • Online tracking: Cookies, tracking pixels, and browser fingerprinting allow brokers and their partners to follow your activity across websites and piece together interests, habits, and purchase intent.

Understanding these sources is the first step toward making more informed choices about what you share. For a broader foundation, see our introduction to online privacy.

4,000+

Estimated number of active data brokers in the U.S.

The Privacy Rights Clearinghouse and related research organizations have tracked over four thousand companies operating in some capacity as data brokers in the American market.

$300B+

Estimated annual U.S. data broker industry revenue

Industry analysts have estimated the broader data brokerage and related data services market generates hundreds of billions of dollars annually, though precise figures vary by definition.

~240M

American adults with data broker profiles

Consumer advocacy research suggests the vast majority of American adults have profiles in at least one major data broker database, often without their knowledge.

What Kind of Profile Gets Built on You

The individual pieces of data a broker collects may seem harmless in isolation. Combined, they form something far more revealing.

A typical broker profile on an American adult can include:

  • Full legal name, current and past addresses, and phone numbers
  • Estimated household income and net worth range
  • Education level and employment history
  • Political party affiliation and donation history (from public records)
  • Health interest categories inferred from search behavior or purchases (e.g., diabetes-related products)
  • Consumer spending habits and brand preferences
  • Family composition — whether you have children, elderly relatives, or pets
  • Daily location patterns derived from mobile signals

This is the process of data fusion — combining fragments from unrelated sources to infer things you never explicitly disclosed. A broker may not know your medical diagnosis, but purchasing patterns and search behavior can suggest health conditions with surprising accuracy.

“Data brokers know more about you than your closest friends do — and unlike your friends, they're selling that knowledge to the highest bidder.”

— Pam Dixon, Executive Director, World Privacy Forum

Once assembled, these profiles are sold in bulk or licensed to clients across industries. Advertisers use them to micro-target campaigns. Insurers may use inferred risk signals. Lenders may assess creditworthiness using non-traditional data points. Employers sometimes run background checks through broker-linked services.

How to Reduce Your Exposure

You can't opt out of the data economy entirely, but you can meaningfully reduce your footprint with deliberate steps.

Start with People-Search Sites

People-search brokers (sites that display your name, address, relatives, and phone number publicly) are among the most visible and impactful to opt out of first. Most have a dedicated opt-out page reachable via a direct web search for the site name plus 'opt out.' Completing these requests takes time but removes some of the most accessible data about you.

Review app permissions regularly. Location access and contact list permissions granted to apps you rarely use are among the most prolific data feeds brokers tap. On both iOS and Android, you can audit and revoke permissions without uninstalling the app.

Submit opt-out requests to major brokers. The largest data brokers — including people-search sites — are required by some state laws to honor deletion requests. The process is manual and repetitive, but it's worth starting with the brokers that aggregate the most data. Use our digital footprint audit checklist to approach this systematically.

Use privacy-protective defaults. A privacy-focused browser, a DNS-level ad blocker, and limiting the personal information you enter into online forms all reduce what brokers can observe. Securing your devices at the settings level is another meaningful layer of protection.

Understand the trade-offs you're already making. Loyalty programs, free apps, and personalized services are convenient — but each one is a data transaction. Weighing convenience against privacy helps you decide which exchanges are worth it to you.

State Privacy Laws Vary Widely

California, Virginia, Colorado, and several other states have enacted consumer privacy laws that give residents specific rights to access, correct, or delete their data held by brokers. If you live in one of these states, you may have legal tools beyond what federal law currently provides. Check your state attorney general's website for up-to-date guidance on your rights.

No single step eliminates your data broker presence. A layered, consistent approach over time is what reduces your profile most effectively.