
What is a data broker?
- WeThePurple
- Rights
- 8 min read
Data brokers collect your personal information and sell it — usually without you ever knowing. What they are, where they get your data, the different types, your rights, and how to opt out and limit what they collect.
A data broker is a company whose business is collecting information about people and selling it. You're almost never their customer — you're the product. They gather data you never knowingly handed over, build it into profiles, and sell access to advertisers, other companies, and sometimes anyone who pays.
The information comes from many places at once: public records (property, voter rolls, court filings), things you do online, loyalty programs and purchases, app permissions, and data bought or swapped from other companies. Individually each piece looks harmless; combined into one profile, it can reveal a lot about your life.
The different types of data broker

There isn't just one kind of broker. Marketing brokers build advertising audiences and interest segments. People-search sites publish searchable profiles — name, age, addresses, relatives, phone numbers. Risk and identity brokers sell data used for fraud checks and background screening. The same facts about you can sit in all three at once.
What makes data brokers different from a company you actually use is that the relationship is invisible. You never signed up, you can't see your file by default, and you usually don't know which brokers hold your data or who they've sold it to. That opacity is the core privacy problem, not any single data point.
Why data brokers matter
Why it matters in practice: broker profiles feed targeted advertising, but also price discrimination, spam and robocalls, and — when a people-search listing exposes your home address — real-world risks like stalking or harassment. Aggregated data is also a juicy target, so a breach at a broker can leak details you never gave that company directly.
- Data broker — a company that collects personal data and sells it; you're the product, not the customer
- Sources — public records, online activity, purchases and loyalty programs, app data, and data bought from others
- Types — marketing brokers (ad audiences), people-search sites (public profiles), risk/identity brokers (fraud, screening)
- Core problem — the relationship is invisible: no sign-up, no default view of your file, no list of buyers
- Your rights — GDPR (access/erasure) in the EU; California's privacy laws and Delete Act, plus broker registries in some US states
- What you can do — opt out of people-search sites (or use a removal service), use email aliases, and hide your IP from trackers
Your rights and how to opt out
Your rights depend on where you live. The EU's GDPR lets you ask any company, brokers included, what they hold, and request access or erasure. Some US states have moved too: California's privacy laws and "Delete Act" aim at a central way to tell registered brokers to delete your data, and a few states keep public broker registries. Rights exist; using them takes effort.
Removing yourself is possible but it's whack-a-mole. People-search sites each have their own opt-out page, and you typically have to find your listing, request removal, and repeat across dozens of sites. Brokers can also re-add you later from fresh public records, so it's maintenance, not a one-time fix. Paid removal services automate the chasing but can't guarantee permanence.
How to limit what they collect
You can't delete yourself from every broker, but you can reduce how much new data they collect and how easily they link it to you. Sharing less, using email aliases so a single address doesn't tie your accounts together, and hiding your IP from trackers all shrink the trail that feeds these profiles in the first place.
Treat it as layers: opt out of the biggest people-search sites (or use a removal service), exercise your legal rights where you have them, and cut off new collection going forward. You won't be invisible, but you can be a much smaller, harder-to-assemble target — which is the realistic goal.



Removing yourself is possible but it's whack-a-mole. People-search sites each have their own opt-out page, and you typically have to find your listing, request removal, and repeat across dozens of sites. Brokers can also re-add you later from fresh public records, so it's maintenance, not a one-time fix. Paid removal services automate the chasing but can't guarantee permanence.