Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a loyalty card, install a mobile app, or browse a news site, invisible companies are quietly cataloging your behavior. These companies—known as data brokers—collect, package, and sell details about your life to advertisers, insurers, employers, political campaigns, and even government agencies. Most consumers have never heard of them, yet the data broker industry is estimated to be worth over $400 billion globally.

This guide explains who data brokers are, exactly how they get your personal information, which companies dominate the market, and what practical steps you can take to remove yourself from their databases.

What Are Data Brokers?

Data brokers are companies that collect personal information about individuals from public and private sources, then aggregate, analyze, and sell that information to third parties. Unlike social media platforms or search engines, data brokers typically have no direct relationship with the people whose data they profit from.

The industry breaks down into three main categories:

• Marketing data brokers — build consumer profiles for advertisers (e.g., Acxiom, Epsilon, Oracle Data Cloud).
• People search sites — publish personal information searchable by name (e.g., Spokeo, Whitepages, BeenVerified).
• Risk mitigation and background check brokers — supply data for fraud detection, credit decisions, and employment screening (e.g., LexisNexis, TransUnion, CoreLogic).

What Kind of Information Do Data Brokers Sell?

The scope of data collection has expanded dramatically. A single broker profile can include hundreds—sometimes thousands—of individual data points about you.

Common Data Categories

• Identity data: full name, date of birth, current and past addresses, phone numbers, email addresses, Social Security or national ID numbers.
• Demographic data: age, gender, marital status, household size, ethnicity, religion, education, income bracket.
• Financial data: credit score ranges, estimated net worth, homeownership status, mortgage details, bankruptcy history.
• Behavioral data: purchase history, browsing habits, app usage, TV viewing patterns, location trails from mobile devices.
• Health and lifestyle inferences: likely medical conditions, fitness habits, dietary preferences, pregnancy status, mental health indicators.
• Political and social data: voter registration, likely political affiliation, charitable giving, gun ownership predictions.

Some brokers openly market segments like "financially distressed seniors," "expectant mothers," or "households with a recently deceased family member"—categories that can be used for legitimate marketing but also enable predatory targeting.

How Do Data Brokers Collect Your Information?

Data brokers rarely gather information from you directly. Instead, they aggregate it from a sprawling ecosystem of sources.

1. Public Records

Court filings, property deeds, marriage and divorce records, voter rolls, business registrations, and licensing databases are all public. Brokers scrape and index these records at scale.

2. Commercial Sources

Retailers, magazine publishers, credit card companies, warranty registration cards, and loyalty programs sell or share customer lists. That "free" grocery discount card is often paid for with your shopping history.

3. Web Tracking and Cookies

Tracking pixels, third-party cookies, and browser fingerprinting technologies follow you across websites. This data is bundled with cookie IDs and later linked to your real identity through email hashing and device graph matching.

4. Mobile Apps and SDKs

Free apps—especially weather, flashlight, prayer, and gaming apps—often embed software development kits (SDKs) that quietly transmit location data, contact lists, and device identifiers to brokers.

5. Social Media Scraping

Public posts, profile fields, connections, likes, and photos are harvested and cross-referenced with other datasets to enrich profiles.

6. Data Breaches and Leaks

Some brokers openly purchase or ingest data exposed in breaches, mixing legitimately sourced data with information that never should have been public.

The Biggest Data Brokers in 2026

While hundreds of brokers operate globally, a handful of firms dominate the market. Here is a comparison of some of the largest.

Company	Primary Focus	Estimated Profiles	Where They Get Data
Acxiom (LiveRamp)	Marketing and identity resolution	2.5 billion+ globally	Retailers, publishers, offline purchases
Epsilon	Marketing and email targeting	250 million+ US consumers	Loyalty programs, transactional data
Oracle Data Cloud	Advertising audiences	5 billion+ device IDs	App SDKs, web tracking, partners
LexisNexis Risk Solutions	Fraud, insurance, government	280 million+ US identities	Public records, credit headers
Spokeo	People search	600 million+ profiles	Public records, social media
CoreLogic	Property and financial risk	99% of US properties	County records, mortgage data

Who Buys Data From Brokers?

The customer list is broader than most people realize. Buyers include:

1. Advertisers and ad-tech platforms targeting specific audience segments.
2. Financial institutions underwriting loans, credit cards, and insurance policies.
3. Employers and landlords running background checks.
4. Political campaigns microtargeting voters by ideology and turnout probability.
5. Government agencies that purchase data they might not be able to obtain through legal warrants.
6. Debt collectors, private investigators, and stalkers using people-search sites to locate individuals.
7. Scammers who use broker data to craft convincing phishing and social engineering attacks.

The Real-World Risks of the Data Broker Economy

The consequences of unrestricted data brokerage extend far beyond annoying targeted ads.

Discrimination and Price Gouging

Behavioral profiles enable "weblining"—the digital equivalent of redlining—where certain customers see higher prices, are denied credit, or are excluded from job opportunities based on inferred characteristics.

Physical Safety Risks

People-search sites have been used to locate domestic abuse survivors, harass journalists, and dox activists. In several documented cases, information purchased from brokers has directly contributed to stalking and violence.

Identity Theft and Fraud

Aggregated broker data provides fraudsters with everything needed to impersonate you: address history, family member names, previous employers, and answers to common security questions.

Erosion of Democratic Choice

Microtargeted political messaging based on broker profiles allows campaigns to show different—sometimes contradictory—messages to different voters, undermining informed public debate.

Are Data Brokers Legal?

In most jurisdictions, yes—though regulation is tightening. The legal landscape varies dramatically by region.

United States

The US has no comprehensive federal privacy law. State laws are filling the gap. California's CCPA/CPRA, Vermont's data broker registry, Texas, Oregon, and California all now require data brokers to register with the state. California's new DELETE Act (fully effective in 2026) will allow residents to submit a single request to be removed from all registered brokers.

European Union and United Kingdom

GDPR and UK GDPR impose strict consent, transparency, and deletion requirements. Brokers must have a lawful basis for processing, and individuals have robust rights to access and erase their data.

Other Regions

Brazil's LGPD, Canada's PIPEDA (under reform via Bill C-27), and Australia's Privacy Act reforms are all moving toward stricter broker regulation.

How to Reduce Your Exposure to Data Brokers

You cannot fully disappear from the data broker ecosystem, but you can significantly shrink your footprint. Here is a practical, prioritized plan.

Step 1: Opt Out of Major Brokers

Start with the largest players and people-search sites. Each has its own opt-out process:

• Acxiom, Epsilon, and Oracle offer marketing opt-out portals.
• Spokeo, Whitepages, BeenVerified, Radaris, and MyLife each require separate removal requests.
• LexisNexis offers a "consumer disclosure and suppression" process.

Paid removal services like DeleteMe, Kanary, and Optery automate this across dozens or hundreds of brokers for an annual fee.

Step 2: Lock Down Your Browser and Devices

1. Use a privacy-focused browser (Brave, Firefox with strict tracking protection, or Safari with Advanced Tracking Protection).
2. Install a reputable tracker blocker like uBlock Origin or Privacy Badger.
3. Enable encrypted DNS (DNS over HTTPS) with a privacy-respecting resolver.
4. Reset your mobile advertising ID monthly and disable ad personalization on iOS and Android.
5. Deny location, contacts, and background access to any app that doesn't strictly need it.

Step 3: Compartmentalize Your Identity

Use email aliases (from services like SimpleLogin, Apple's Hide My Email, or Firefox Relay) so that a breach at one merchant doesn't feed your entire identity graph. Consider a dedicated phone number for loyalty programs and non-essential signups.

Step 4: Protect the Links You Share

When you share links publicly—on social media, in newsletters, or in messages—those URLs can be scraped and used to enrich broker profiles about your interests. Using a privacy-conscious link management tool like Lunyb lets you shorten and share URLs without exposing tracking parameters or leaking your source data to third-party analytics networks. For a deeper look at how Lunyb approaches this, see our honest review of Lunyb, and compare it against alternatives in our 2026 URL shortener buyer's guide.

Step 5: Exercise Your Legal Rights

If you live in a jurisdiction with privacy laws, use them. Submit Subject Access Requests (SARs) under GDPR, or "Right to Know" and "Right to Delete" requests under CCPA. Keep records of your requests; brokers are legally required to respond within set timeframes.

Step 6: Freeze Your Credit

A credit freeze at the major bureaus (Equifax, Experian, TransUnion, plus Innovis and ChexSystems in the US) prevents new accounts from being opened in your name using broker-sourced identity data.

The Future of Data Brokerage

Three trends are reshaping the industry:

1. Consolidation. Ad-tech giants are absorbing data brokers, blurring the line between platform and broker.
2. Regulation. Universal opt-out mechanisms like Global Privacy Control (GPC) and state broker registries are gaining legal teeth.
3. AI-driven inference. Even without collecting new data, brokers are using machine learning to infer sensitive attributes—health status, sexual orientation, political leanings—from innocuous signals, raising the stakes for privacy.

The data broker economy is not going away, but individual awareness and collective regulatory pressure are finally catching up. Every opt-out you file, every tracker you block, and every privacy right you exercise shrinks the profile that brokers can build and sell about you.

Frequently Asked Questions

How do I find out what data brokers have on me?

Start by submitting free consumer disclosure requests to LexisNexis, Acxiom, and the major credit bureaus. In California, EU, and UK, you have a legal right to a full copy of your data. Services like Privacy Bee and Optery also scan hundreds of brokers on your behalf.

Is it worth paying for a data removal service?

For most people, yes. Manually opting out of 200+ brokers takes 40–60 hours and must be repeated every few months because brokers relist you. Services like DeleteMe, Kanary, and Optery cost $100–$250 per year and handle recurring removal automatically.

Can data brokers sell information about my children?

In the US, the Children's Online Privacy Protection Act (COPPA) restricts collection of data from children under 13, but enforcement is uneven and inference-based data (household composition) often includes minors indirectly. In the EU, GDPR-K provides stronger protections for anyone under 16.

Do data brokers know my exact location?

Many do. Location data from mobile app SDKs is one of the most lucrative broker products. Precise GPS trails have been resold to advertisers, hedge funds, and even law enforcement. Denying location permissions to non-essential apps is the single most effective step to reduce this.

Will opting out actually work, or will brokers relist me?

Opt-outs work, but they are not permanent. Brokers frequently re-ingest data from public records and commercial partners, causing profiles to reappear within 3–12 months. Ongoing monitoring—either manual or through a subscription removal service—is necessary to maintain your privacy over time.