Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a newsletter, download a mobile app, or apply for a store loyalty card, a small piece of your identity slips into a vast, invisible marketplace. That marketplace is run by data brokers—companies most people have never heard of, yet they know your income range, health conditions, political views, and daily commute patterns. This guide explains who these companies are, how they profit from your information, and what you can do to take back control.

What Are Data Brokers?

Data brokers are companies that collect, aggregate, analyze, and sell personal information about consumers without directly interacting with them. They compile digital dossiers by pulling from public records, online activity, purchase histories, mobile apps, and other data sources, then resell those profiles to marketers, insurers, employers, political campaigns, and even government agencies.

The industry is enormous. Analysts estimate the global data broker market exceeds $280 billion annually, with more than 4,000 active brokers worldwide. Most operate quietly in the background, which is precisely why they've faced growing scrutiny from regulators in the EU, California, and other jurisdictions.

The Three Main Types of Data Brokers

1. Marketing and advertising brokers — Build audience segments for targeted ads (e.g., "suburban parents interested in luxury cars").
2. Risk mitigation brokers — Sell data to banks, insurers, and landlords for fraud detection and background checks.
3. People search brokers — Publish searchable profiles online containing your name, address, phone number, relatives, and more.

Who Are the Biggest Data Brokers Selling Personal Information?

While thousands of brokers exist, a handful dominate the industry. Here are some of the largest players and what they specialize in:

Company	Primary Focus	Data Points Collected
Acxiom (LiveRamp)	Marketing profiles	Up to 1,500 per person
Experian	Credit + marketing data	Financial, demographic, lifestyle
Equifax	Credit reporting, employment	Income, employment history
Oracle Data Cloud	Ad targeting	Behavioral, purchase intent
LexisNexis	Risk and legal data	Public records, court filings
Spokeo, BeenVerified, Whitepages	People search	Addresses, relatives, phone numbers
CoreLogic	Property and real estate	Mortgage, ownership, valuations

Beyond these giants, thousands of smaller brokers specialize in niche categories: health conditions, veteran status, religious affiliations, gambling behavior, and even lists of people experiencing financial hardship.

What Kind of Personal Information Do They Sell?

Data brokers don't just sell your email address. Modern profiles are shockingly detailed, often combining hundreds of attributes to predict behavior with precision.

Common Categories of Sold Data

• Identity data: full name, aliases, date of birth, Social Security or national ID digits, government records
• Contact data: home address, historical addresses, phone numbers, email accounts
• Financial data: income brackets, credit scores, loan history, bankruptcies, homeownership
• Behavioral data: websites visited, apps used, purchase history, search queries
• Location data: daily movement patterns collected from mobile SDKs embedded in apps
• Health-adjacent data: prescriptions ordered, medical conditions inferred from purchases
• Sensitive attributes: political leanings, religion, sexual orientation, pregnancy status
• Family and social data: relatives, roommates, marital status, children's ages

Perhaps most alarming, a 2023 Duke University study revealed brokers openly selling lists of active-duty military personnel—including their home addresses and mental health conditions—for as little as 12 cents per record.

How Do Data Brokers Collect Your Information?

Understanding the collection pipeline is the first step to reducing your exposure. Brokers pull data from dozens of channels, most of which feel completely mundane in your day-to-day life.

The Main Collection Sources

1. Public records: Court filings, property deeds, voter registrations, marriage licenses, and business registrations are legally accessible and freely scraped.
2. Mobile apps and SDKs: Weather, flashlight, prayer, and fitness apps often bundle software development kits that quietly transmit location and device identifiers.
3. Loyalty programs: Grocery, pharmacy, and airline reward programs sell aggregated purchase data.
4. Social media scraping: Public profiles, comments, and likes are harvested at scale.
5. Web tracking: Cookies, pixels, and browser fingerprinting follow you across the web.
6. Data partnerships: Brokers trade and merge datasets, multiplying the coverage of each individual profile.
7. Leaked and breached data: Some brokers ingest data from breaches, even when it's technically illegal to do so.

Why Data Brokers Selling Personal Information Is a Serious Problem

Targeted advertising is only the tip of the iceberg. The real risks emerge when profiles are used to make consequential decisions or fall into the wrong hands.

Concrete Harms Linked to Data Brokers

• Discrimination in pricing: Insurers and lenders adjust rates based on inferred risk categories.
• Employment consequences: Background check brokers surface outdated or inaccurate information.
• Stalking and harassment: People-search sites make it trivial to locate abuse survivors, journalists, and public figures.
• Scams and phishing: Fraudsters buy targeted lists of seniors or recently bereaved individuals.
• Political manipulation: Psychographic profiles power hyper-targeted disinformation campaigns.
• National security concerns: Foreign entities can purchase datasets on military personnel and government employees legally.

The Legal Landscape: What Regulations Exist?

Regulation of data brokers varies dramatically around the world. The industry has enjoyed decades of minimal oversight, but the tide is starting to turn.

Key Global Regulations

Region	Law	Key Broker Rules
European Union	GDPR	Requires lawful basis, transparency, and right to erasure
California, USA	CCPA / CPRA	Broker registry, opt-out rights, upcoming "Delete Act" one-click deletion
Vermont, USA	Data Broker Law (2018)	Mandatory registration and security standards
Texas, Oregon	State broker laws	Registration and disclosure requirements
Brazil	LGPD	Consent-based data processing
Canada	PIPEDA	Meaningful consent and purpose limitation

California's Delete Act, taking full effect in 2026, is one of the most ambitious efforts globally. It will let residents submit a single request to remove their data from every registered broker at once.

How to Find Out Which Data Brokers Have Your Information

Before you can remove your data, you need to know who has it. Fortunately, several methods can reveal your exposure.

1. Search yourself on people-search sites: Try Spokeo, BeenVerified, Whitepages, Radaris, MyLife, and PeopleFinders.
2. Check state broker registries: California and Vermont publish public lists of registered brokers.
3. Submit access requests: Under GDPR (EU) or CCPA (California), you can legally request a copy of the data a broker holds on you.
4. Use a data exposure scanner: Tools like Have I Been Pwned reveal breaches; privacy services scan broker sites for your profile.

How to Remove Yourself from Data Broker Databases

Opting out is possible but tedious. Every broker has its own process, and many require multiple steps—sometimes intentionally designed to discourage completion.

Step-by-Step Manual Removal

1. Locate the opt-out page. Search "[broker name] opt out" and go directly to the official site.
2. Find your profile. Search your name plus city or state to surface the correct record.
3. Submit the removal form. This may require email verification or, unfortunately, uploading a redacted ID.
4. Confirm the request. Click any confirmation email within 24 hours.
5. Recheck in 30–45 days. Profiles frequently reappear as brokers re-scrape sources.
6. Repeat annually. Removal is not permanent under most jurisdictions.

Automated Removal Services

Because manually opting out of 200+ brokers can take 60+ hours per year, paid services like DeleteMe, Kanary, Optery, and Incogni automate the process. Expect to pay $70–$180 annually. These services don't cover every broker, but they handle the largest and most persistent ones.

Practical Privacy Habits That Reduce Data Broker Exposure

Removing yourself from existing databases is only half the battle. To stop the flow of new data, adopt privacy-first habits across your digital life.

Everyday Actions That Make a Real Difference

• Use email aliases. Services like SimpleLogin or Apple's Hide My Email create unique addresses for every signup.
• Limit mobile app permissions. Deny location, contacts, and background activity unless truly needed.
• Switch to a privacy-focused browser such as Brave or Firefox with strict tracking protection.
• Enable encrypted DNS (DNS-over-HTTPS or DNS-over-TLS) at the device or router level to prevent network-level profiling.
• Avoid loyalty cards or use a separate email and phone number when signing up.
• Freeze your credit with all major bureaus to block risk-data resellers.
• Be selective with link sharing. When sharing links publicly, use a trusted shortener like Lunyb that doesn't sell click data to third parties. You can read our honest review of Lunyb for more context, or compare options in our 2026 URL shortener buyer's guide.
• Use payment aliases like virtual credit card numbers to avoid linking purchases to your identity.

The Future of the Data Broker Industry

The next five years will reshape how brokers operate. Several trends are already visible.

What to Expect

1. Universal opt-out mechanisms: Global Privacy Control (GPC) signals are gaining legal recognition.
2. Stricter enforcement: Regulators in the EU and US are levying record fines for improper data sales.
3. Consolidation: Smaller brokers are being absorbed into large ad-tech and identity-resolution firms.
4. AI-driven inference: Even without explicit data, machine learning models will infer sensitive attributes from innocuous signals.
5. Consumer-owned data models: Emerging platforms let individuals monetize or entirely withhold their own data.

Regardless of how the industry evolves, one fact remains constant: your personal information is valuable, and awareness is the foundation of protecting it.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most countries, yes—though with growing restrictions. The EU's GDPR and California's CCPA impose meaningful limits, requiring consent or a lawful basis and giving you the right to opt out or request deletion. In jurisdictions without comprehensive privacy laws, the sale of aggregated personal data remains largely unregulated as long as brokers avoid sensitive categories like protected health records.

How much money do data brokers make from selling my information?

Individual records are cheap—often between $0.10 and $5 per profile—but the industry aggregates billions of transactions. A single consumer's data across a lifetime can generate several hundred dollars in revenue for the broker ecosystem, especially when enriched with behavioral and location data.

Can I permanently delete my information from all data brokers?

Not entirely. Because brokers continuously re-scrape public records and receive new data from partners, profiles often reappear months after deletion. Ongoing monitoring—either manual or through an automated removal service—is required to keep your information suppressed. California's Delete Act aims to make one-time deletion more effective for registered brokers.

Do free people-search sites really remove my data when I opt out?

Most reputable sites honor opt-out requests, but the process can take 7–45 days, and profiles frequently reappear when new data is imported. Some sites also share back-end databases, meaning a listing on one site can regenerate profiles on affiliated ones. Consistent, repeated opt-outs are essential.

What is the single most effective step I can take to reduce data broker exposure?

Freezing your credit and opting out of the three major credit bureaus' pre-approved offer lists is one of the highest-impact single actions. Combined with using email aliases for new signups and limiting mobile app permissions, you can dramatically reduce the flow of new information into the broker ecosystem within weeks.