Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a loyalty card, install a free app, or browse a news site, a shadow industry quietly records what you did. These companies—data brokers—compile dossiers on billions of people and sell that information to advertisers, insurers, employers, political campaigns, and even scammers. Most consumers have never heard of the firms building their profiles, yet those profiles may contain hundreds of data points about their health, finances, location history, and relationships.

This guide explains who the major data brokers are, how they get your personal information, who buys it, and what you can do to reduce your exposure.

What Are Data Brokers?

Data brokers are companies that collect personal information about individuals from public, commercial, and online sources, package it into profiles, and sell or license it to third parties. They typically have no direct relationship with the people whose data they trade, which is why most consumers are unaware they exist.

The industry is massive. Analysts estimate the global data broker market will exceed $450 billion by 2026, with thousands of firms operating worldwide. Some brokers focus narrowly—say, on real estate records or professional credentials—while others, like Acxiom or Oracle Data Cloud, aggregate thousands of attributes across hundreds of millions of consumers.

Types of Data Brokers

1. Marketing and advertising brokers: Build audience segments for digital ad targeting (e.g., "new parents in the suburbs with household income over $80k").
2. People-search sites: Publish names, addresses, phone numbers, relatives, and criminal records on public web pages (e.g., Spokeo, BeenVerified, Whitepages).
3. Risk mitigation brokers: Supply background checks, identity verification, and fraud scores to employers, landlords, and banks.
4. Health and financial data brokers: Sell prescription patterns, insurance claims, credit indicators, and purchase histories.
5. Location data brokers: Aggregate GPS pings from mobile apps and resell precise movement history.

How Data Brokers Collect Your Personal Information

Data brokers rarely ask you directly. Instead, they vacuum information from dozens of streams and stitch it together with persistent identifiers like email hashes, device IDs, and cookies.

Common Collection Sources

• Public records: Property deeds, voter rolls, court filings, marriage licenses, business registrations, and professional licenses.
• Commercial sources: Loyalty programs, warranty cards, magazine subscriptions, charity donations, and retail purchase data sold by merchants.
• Online tracking: Cookies, tracking pixels, browser fingerprints, and SDKs embedded in free mobile apps.
• Social media scraping: Public profiles, posts, likes, friend lists, and even deleted content archived before removal.
• Data partnerships: Telecoms, airlines, credit card networks, and app developers that license anonymized (and often re-identifiable) data.
• Leaked and breached databases: Some brokers quietly incorporate information from past breaches into their files.

Once collected, data is matched using identifiers like email addresses, phone numbers, or hashed cookies to build a unified profile that follows you across devices and services.

The Biggest Data Brokers You Should Know

While there are thousands of firms, a handful of giants dominate the industry. The table below summarizes the largest brokers, what they focus on, and the kinds of records they maintain.

Broker	Primary Focus	Approx. Records	Main Buyers
Acxiom (LiveRamp)	Marketing data, identity resolution	2.5+ billion consumers	Advertisers, retailers
Oracle Data Cloud	Audience targeting, B2B	5+ billion device IDs	Ad platforms, brands
Experian	Credit, marketing, verification	1+ billion	Lenders, insurers
Equifax	Credit and employment data	800+ million	Banks, employers
CoreLogic	Property and mortgage data	99% of US properties	Real estate, insurance
Spokeo / BeenVerified	People-search profiles	120+ billion records	General public, recruiters
Nielsen	TV, streaming, consumer behavior	Panel + modeled data	Media, advertisers
LexisNexis Risk Solutions	Legal, identity, insurance risk	Billions of records	Government, insurers

Who Buys Your Data and Why

Data brokers sell to any legal buyer willing to pay—and the list is long.

Primary Buyers

• Advertisers and marketers use audience segments to target ads with surgical precision across websites, apps, and connected TV.
• Banks and insurers use broker data to assess risk, set premiums, and detect fraud.
• Employers and landlords run background checks that pull from broker databases.
• Political campaigns micro-target voters based on inferred ideology, religion, and issue priorities.
• Government agencies purchase data to sidestep warrant requirements—particularly location data from mobile apps.
• Debt collectors and law firms use skip-tracing tools built on broker records.
• Scammers and bad actors buy lists of elderly consumers, recent widows, or financially distressed households to target with fraud.

That last category is particularly alarming. Journalists and regulators have repeatedly documented brokers selling "suckers lists" of vulnerable individuals to fraud rings for pennies per record.

What Data Brokers Actually Know About You

A single broker file can contain thousands of attributes. Here is a representative sample of what large aggregators maintain:

• Identity: Full name, aliases, date of birth, Social Security Number fragments, government IDs.
• Contact: Current and historical addresses, phone numbers, email addresses.
• Household: Family members, roommates, marital status, number and ages of children.
• Financial: Estimated income, net worth, credit tier, investments, mortgage balance.
• Behavioral: Hobbies, charitable giving, political leanings, religion, magazine subscriptions.
• Health: Inferred conditions (diabetes, pregnancy, mental health), OTC purchases, fitness app usage.
• Location: Home, work, gym, places of worship, travel history based on mobile GPS pings.
• Digital: Devices owned, browsers used, social media handles, online purchase categories.

The Risks of Unregulated Data Trading

The consequences go beyond annoying ads.

Real-World Harms

1. Identity theft and fraud: Leaked broker databases hand criminals ready-made profiles for account takeover and tax fraud.
2. Stalking and harassment: People-search sites have been linked to multiple high-profile stalking cases, including the 2020 attack on US federal Judge Esther Salas, where a gunman used a broker to find her home address.
3. Discrimination: Inferred data can enable illegal discrimination in housing, lending, and hiring that is difficult to detect or challenge.
4. Price steering: Insurers and retailers adjust prices based on your perceived willingness to pay.
5. Surveillance workarounds: Government agencies that would need a warrant to collect location data instead buy it from brokers.
6. Reputational damage: Outdated or inaccurate records—old addresses, dismissed charges, mistaken identity—can derail job applications and rental screenings.

Laws That (Partially) Regulate Data Brokers

Regulation has lagged the industry, but several frameworks now impose rules.

Law / Region	Key Rights	Effective
GDPR (EU/UK)	Access, deletion, portability, opt-out of profiling	2018
CCPA / CPRA (California)	Access, delete, opt-out of sale, correct	2020 / 2023
California Delete Act	Single request deletes you from all registered brokers	Rolling 2026
Vermont Data Broker Law	Mandatory broker registration	2019
Texas, Oregon, Colorado	Broker registration and opt-outs	2024–2025
LGPD (Brazil)	GDPR-style consumer rights	2020

Despite these laws, enforcement is patchy, and most countries still allow brokers to operate with minimal oversight.

How to Remove Yourself From Data Broker Databases

You cannot erase your digital footprint entirely, but you can shrink it significantly.

Step-by-Step Removal Process

1. Make a target list. Start with the largest people-search sites: Spokeo, BeenVerified, Whitepages, Intelius, MyLife, Radaris, PeopleFinder, and TruePeopleSearch.
2. Find each broker's opt-out page. Most bury it in the privacy policy footer. Search "[broker name] opt out" to find the direct URL.
3. Submit a removal request. You will usually need to verify your identity by email or phone. Avoid uploading your government ID when possible.
4. Document everything. Keep screenshots and confirmation emails—brokers often re-list you within months.
5. Re-check every 3–6 months. New records continuously enter broker systems from fresh public data.
6. Use state-level rights. If you live in California, the EU, or another covered jurisdiction, submit formal deletion requests citing the applicable law.
7. Consider a paid removal service. Tools like DeleteMe, Kanary, and Optery automate opt-outs across hundreds of brokers for an annual fee.

Reducing Future Collection

• Use email aliases (SimpleLogin, Firefox Relay, Apple Hide My Email) for signups so brokers cannot easily link accounts.
• Give out a secondary phone number (Google Voice, MySudo) for loyalty programs and online forms.
• Disable ad personalization and reset your advertising ID in iOS and Android settings regularly.
• Install a tracker-blocking browser like Brave or Firefox with strict protection enabled, plus uBlock Origin.
• Use encrypted DNS (NextDNS, Cloudflare 1.1.1.1 for Families) to block known tracker domains at the network level.
• Audit app permissions—revoke location, contacts, and background access from any app that does not strictly need it.
• When sharing links, use a privacy-respecting shortener like Lunyb that does not sell click data to third-party ad networks. Our honest Lunyb review walks through exactly how our tracking policies compare.

Choosing Privacy-Respecting Tools

Many free services fund themselves by feeding behavioral data into the broker ecosystem. When you evaluate a new app, extension, or link shortener, read the privacy policy for three red flags: sharing with "advertising partners," "affiliates," or "data analytics providers." Those phrases usually mean broker pipelines.

For link sharing specifically, our 2026 buyer's guide to URL shorteners compares which providers monetize click streams versus those that keep data private. If you manage branded links at scale, our Rebrandly review also covers how enterprise shorteners handle data collection.

The Future of the Data Broker Industry

Three trends will reshape the industry over the next few years:

1. Universal opt-outs. California's Delete Act and Global Privacy Control signals will force brokers to honor one-click deletion requests, raising compliance costs dramatically.
2. Death of third-party cookies. As browsers phase out cross-site tracking, brokers are pivoting to first-party data partnerships, email-based identity graphs, and "clean rooms" that obscure how data moves.
3. AI-powered inference. Even without explicit data, machine learning models can predict sensitive attributes (sexuality, mental health, pregnancy) from behavioral patterns, which raises new regulatory and ethical challenges.

Expect more lawsuits, more state laws, and growing consumer awareness. The brokers that survive will be the ones that embrace consent-based models—or those that successfully hide behind layers of intermediaries.

Key Takeaways

• Thousands of data brokers collect and sell personal information with little direct consumer awareness.
• Your profile may include financial, health, location, and behavioral data—worth real money to advertisers, insurers, and sometimes criminals.
• Removal is possible but tedious; expect to repeat the process every few months or use a paid service.
• Reducing future collection matters as much as deleting existing records: alias emails, blocked trackers, and privacy-respecting tools starve the pipeline.
• New laws in the EU, California, and other states give you enforceable rights—use them.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most countries, yes—provided they comply with applicable privacy laws. The GDPR in Europe and the CCPA/CPRA in California give consumers rights to access, delete, and opt out of the sale of their data, but outside those jurisdictions, brokers often operate with few restrictions. Even where laws exist, enforcement is uneven and compliance varies widely.

How much is my personal data worth to brokers?

Individually, very little—typically fractions of a cent per data point. Bundled profiles sell for a few dollars, and curated audience segments (e.g., "diabetic adults earning $100k+") can fetch much more. The industry's value comes from scale: brokers monetize billions of profiles, not individual sales.

Will removing myself from one broker remove me from all of them?

No. Each broker operates its own database, so you must submit a separate request to each one. California's Delete Act (rolling out through 2026) is the first law to create a single "delete me everywhere" mechanism, but it only applies to brokers registered in California and only to California residents.

Can I sue a data broker for selling my information?

Possibly, depending on your jurisdiction and the nature of the harm. GDPR allows European consumers to seek damages for violations. In the US, the Fair Credit Reporting Act, state privacy laws, and class-action settlements have produced payouts, especially after data breaches. Consult a privacy attorney if you have suffered concrete damages like identity theft or stalking.

Do paid data removal services actually work?

Reputable services like DeleteMe, Optery, and Kanary genuinely reduce your exposure by automating opt-outs across hundreds of brokers and monitoring for re-listings. They are not perfect—some brokers resist removal, and new data constantly flows in—but for most people the time saved justifies the $100–$200 annual cost. Always verify independently that your records have been removed.