Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a loyalty card, install a free app, or browse a shopping site, a hidden industry takes notice. Data brokers quietly compile thousands of details about you and sell that information to advertisers, insurers, employers, political campaigns, and sometimes anyone with a credit card. This guide explains who these companies are, what they know about you, how they profit, and what you can do to take back control.

What Are Data Brokers?

Data brokers are companies that collect, aggregate, analyze, and sell personal information about individuals, usually without direct interaction with the people whose data they trade. They operate largely in the background of the digital economy, building detailed dossiers used for marketing, risk scoring, fraud detection, and behavioral targeting.

The global data broker industry is estimated to be worth more than $280 billion in 2026, with thousands of firms competing to build the most detailed consumer profiles. Some are household names in advertising circles, while others operate under obscure brands most consumers have never heard of.

Types of Data Brokers

• Marketing brokers: Sell audience segments to advertisers (e.g., "new parents in Ohio earning $80K+").
• People-search sites: Publish addresses, phone numbers, relatives, and criminal records online for anyone to buy.
• Risk mitigation brokers: Supply background checks, tenant screening, and identity verification to landlords, employers, and banks.
• Health data brokers: Aggregate prescription histories, wellness app data, and inferred medical conditions.
• Location data brokers: Sell GPS traces harvested from mobile apps, sometimes precise enough to track individual devices.

The Biggest Data Brokers Selling Personal Information

While thousands of firms trade in personal data, a handful of giants dominate the market. Here is how the largest players compare.

Company	Primary Business	Estimated Records	Main Customers
Acxiom (LiveRamp)	Marketing profiles	2.5 billion consumers	Advertisers, retailers
Experian	Credit + marketing	1 billion+	Banks, marketers
Equifax	Credit + workforce data	820 million+	Lenders, employers
Oracle Data Cloud	Ad targeting	5 billion device IDs	Ad platforms
CoreLogic	Property + financial	4.5 billion records	Insurers, real estate
Spokeo / BeenVerified	People search	12+ billion records	Public consumers
LexisNexis	Risk + legal data	84 billion records	Government, insurers

How Data Brokers Collect Your Information

Data brokers rarely ask permission because they rarely need to. They combine hundreds of public, semi-public, and commercial sources into a single profile that can contain more than 1,500 data points on a typical adult.

Common Collection Sources

1. Public records: Voter rolls, court filings, property deeds, marriage licenses, business registrations, and professional licenses.
2. Commercial transactions: Loyalty programs, warranty registrations, magazine subscriptions, and credit card purchase data sold by retailers.
3. Mobile apps: Free games, weather apps, flashlight tools, and even period trackers often embed SDKs that ship location and behavioral data to brokers.
4. Web tracking: Cookies, pixels, and fingerprinting scripts embedded on millions of websites feed browsing behavior back to ad-tech intermediaries.
5. Social media scraping: Public posts, likes, follows, and profile photos are harvested at scale.
6. Data breaches and leaks: Some brokers legally purchase datasets that first appeared on hacker forums, laundering them through resellers.
7. Surveys and sweepstakes: Those "win a free iPad" pop-ups exist almost entirely to feed broker databases.

What Do Data Brokers Actually Know About You?

A modern broker profile is far richer than most people realize. It typically includes categories most consumers assume are private.

Categories in a Typical Consumer Dossier

• Identity: Full name, aliases, date of birth, Social Security or national ID number, driver's license.
• Contact: Current and historical addresses, phone numbers, personal and work email addresses.
• Financial: Estimated income, net worth, credit score band, mortgage balance, investment interests.
• Household: Marital status, spouse name, children's ages, pets, home value, vehicle make and model.
• Health inferences: Likely conditions (diabetes, depression, pregnancy), OTC purchases, fitness activity.
• Behavioral: Political leanings, religion, hobbies, favorite brands, TV viewing habits.
• Location history: Places visited, commute patterns, travel frequency.
• Vulnerability flags: "Financially stressed," "recently bereaved," "gambling-prone" — categories controversially sold to predatory advertisers.

Who Buys Personal Information from Data Brokers?

The customer base is broader and stranger than many consumers assume. Data brokers sell to virtually any organization willing to pay, subject only to loose self-regulation.

1. Advertisers and ad-tech platforms use segments to target campaigns across web, mobile, and connected TV.
2. Retailers and e-commerce brands buy lookalike audiences to acquire new customers.
3. Banks, insurers, and lenders use enrichment data to price risk and detect fraud.
4. Employers and landlords purchase background reports for screening.
5. Political campaigns micro-target voters based on inferred beliefs.
6. Debt collectors and process servers locate individuals through skip-tracing databases.
7. Government agencies and law enforcement buy datasets they could not lawfully collect themselves, a growing controversy.
8. Scammers and stalkers sometimes exploit low-cost people-search sites to find victims — a documented and ongoing harm.

The Real-World Risks of Broker Data

This is not an abstract privacy issue. Data broker profiles have been linked to concrete harms.

Documented Consequences

• Identity theft: Detailed profiles make it trivial to answer "security" questions like mother's maiden name or previous address.
• Price discrimination: Online prices for insurance, travel, and retail goods are quietly adjusted based on broker-supplied income and behavior signals.
• Discrimination in housing and employment: Screening reports can contain outdated or incorrect information that costs people jobs and apartments.
• Stalking and domestic abuse: Survivors have been located through people-search sites, sometimes with fatal outcomes.
• Robocalls and phishing: Fresh phone lists fuel the scam call industry.
• Health premium hikes: Inferred health conditions can influence life insurance underwriting.

The Legal Landscape in 2026

Regulation is finally catching up, but coverage remains uneven around the world.

Key Regulations

• GDPR (EU/UK): Requires a lawful basis for processing, gives residents the right to access, correct, and delete data.
• CCPA / CPRA (California): Grants opt-out rights, and the Delete Act now lets Californians request deletion from all registered brokers with a single request.
• State laws in the U.S.: Texas, Colorado, Virginia, Connecticut, Oregon, and others have passed broker registration and opt-out laws.
• Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act: Provide varying but strengthening rights.
• Vermont and California broker registries: Public lists of registered brokers make opt-out requests easier to send.

Despite these advances, enforcement is inconsistent, and many brokers exploit loopholes by classifying data as "de-identified" — a claim researchers routinely disprove.

How to Remove Yourself from Data Brokers

Reclaiming your data takes effort, but the process is achievable if you stay methodical.

Step-by-Step Removal Process

1. Search yourself. Google your full name in quotes plus your city. Note every people-search site that appears.
2. Prioritize the big ones. Start with Spokeo, BeenVerified, Whitepages, Intelius, MyLife, Radaris, and PeopleFinders.
3. Find each broker's opt-out page. Most bury it in the footer or a help center article.
4. Submit deletion requests. You may need to verify your identity via email or a phone code. Use a dedicated email address for this purpose.
5. Track submissions. Keep a spreadsheet with dates, confirmation numbers, and follow-up deadlines.
6. Reconfirm after 30-45 days. Brokers often re-list profiles as new public records appear.
7. Use official registries. If you live in California or Vermont, file through the state broker registry to reach hundreds of firms at once.
8. Consider a paid removal service if the manual work is overwhelming. Reputable services handle recurring re-scans.

Ongoing Habits to Limit Data Broker Exposure

Removal is only half the battle. Preventing new data collection matters just as much.

Practical Privacy Habits

• Use encrypted DNS (such as DNS-over-HTTPS) to prevent your internet provider and public networks from logging every domain you visit.
• Switch to a privacy-focused browser such as Brave, Firefox with strict tracking protection, or DuckDuckGo's browser.
• Install a reputable content blocker like uBlock Origin to stop trackers before they load.
• Compartmentalize email. Use email aliases (SimpleLogin, Firefox Relay, Apple Hide My Email) for signups so brokers cannot merge profiles.
• Lock down mobile permissions. Deny location access to apps that do not need it, and reset your advertising ID monthly.
• Avoid loyalty cards or use a fake name and burner phone number when possible.
• Freeze your credit at the three major bureaus. This blocks a major broker enrichment channel and prevents identity fraud.
• Shorten links you share using privacy-respecting tools. A shortener like Lunyb lets you share destinations without exposing referral chains and tracking parameters. If you compare tools, see our 2026 buyer's guide and Rebrandly review.

The Future of the Data Broker Industry

Two forces are reshaping the industry in 2026. First, mainstream browsers have finally deprecated third-party cookies, forcing brokers to rely more on hashed emails, mobile IDs, and inference. Second, U.S. state laws are converging toward a model where consumers can send a single deletion signal that binds every registered broker.

At the same time, artificial intelligence has supercharged what brokers can infer from limited data. A single email address, cross-referenced with breach dumps and social graphs, can now generate a startlingly accurate personality and financial profile in seconds. The privacy arms race is far from over.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most countries, yes — provided the broker complies with local privacy laws. In the EU, UK, and California, you have strong rights to access and delete your data, but enforcement varies. In much of the U.S., selling personal data remains legal by default and consumers must opt out broker by broker.

How much money do data brokers make from my information?

Individual profiles sell for pennies to a few dollars, but brokers make billions in aggregate. A single detailed dossier can be resold hundreds of times across advertising, credit, insurance, and screening markets, so cumulative revenue per consumer often exceeds $200 per year.

How long does it take to remove myself from data brokers?

Opting out of the top 15-20 people-search sites takes about 8-12 hours of focused work. Full removal from the long tail of brokers realistically takes months and requires quarterly re-checks because profiles frequently reappear.

Are paid data removal services worth it?

They can be, especially if your time is limited or your name is common enough that removal is repetitive. The best services provide continuous monitoring and re-removal. Always verify what the service actually covers — many advertise "hundreds of sites" but only reliably remove from a few dozen.

Can I sue a data broker if my information is misused?

Sometimes. Under GDPR you can complain to a data protection authority and seek damages. In the U.S., private lawsuits succeed mainly when brokers violate specific statutes such as the Fair Credit Reporting Act or state-level broker laws. Consult a privacy attorney if you have suffered concrete harm.

Final Thoughts

Data brokers built a massive industry on the assumption that consumers would never notice, never care, and never fight back. That assumption is finally breaking down. By understanding how brokers operate, opting out of the largest players, and adopting daily habits that limit collection at the source, you can meaningfully shrink your digital footprint. Privacy is no longer the default — but with steady effort, it is still within reach.