Where Do Data Brokers Get Your Information?
Key takeaways
- People-search sites may compile government public records, public social profiles, and information purchased from other brokers.
- A visible profile can combine multiple sources and may contain stale or incorrectly matched details.
- Correcting the source and requesting broker suppression are distinct actions.
- Limit public disclosures and review account settings, while recognizing that these actions cannot retrieve existing copies.
Public Records: The Foundation of Data Broker Profiles
The single largest source of data broker information is public records. These include property ownership filings, voter registration databases, court records, marriage and divorce records, business registration filings, and professional licence databases. In most countries, these records are legally required to be publicly accessible, which means data brokers can collect them without restrictions.
Every time you buy a home, register to vote, appear in a court filing, or obtain a professional licence, that information enters the public record system. Data brokers monitor these systems continuously, updating their databases whenever new records are filed. This is why your data can return to broker sites after removal, the underlying public records have not changed.
Commercial Data Sources
Beyond public records, data brokers purchase information from commercial data providers who aggregate consumer behaviour. Loyalty programme memberships, store card transactions, online purchase histories, warranty registrations, and magazine subscriptions all generate data that is bought and sold in the commercial data market.
Mobile applications are another significant source. Many free apps, particularly those offering location-based services, weather, or lifestyle features, collect GPS location data and sell it to data brokers. App permissions that seem incidental (such as access to your contacts or location while the app is in the background) often serve primarily as data collection mechanisms.
- Loyalty programme memberships and purchase histories
- Mobile app location data and usage patterns
- Online shopping behaviour tracked via cookies and accounts
- Social media profiles and publicly visible activity
- Warranty registration forms and product surveys
- Credit header data from financial transactions
What You Can Do to Limit Future Collection
While it is impossible to completely prevent data brokers from collecting information about you, you can significantly limit the volume of new data being added to your profile. Opting out of loyalty programmes, using privacy-focused browser extensions, limiting location permissions on mobile apps, and keeping social media profiles private all reduce the flow of data into broker databases.
The more immediate priority for most people is addressing existing listings, the data that is already out there and accessible today. Services like protectmydata focus on removing existing listings from 550+ data broker sites, while good data hygiene practices limit the rate at which new information accumulates going forward.
Which sources can contribute to a broker profile?
The FTC says people-search sites may buy information from other data brokers, collect details from publicly viewable social profiles, and compile public records such as property records, voter registration information, court records, and professional licenses. A report may aggregate several of these inputs, so the company displaying a field is not always its original source.
A report can be outdated or associate information with the wrong person. Check the context and record date before treating a result as accurate. If you find an error, identify whether it originated in a source record, a broker's matching process, or a public profile you control. The fix depends on that origin.
Can you stop all collection at the source?
You can reduce some voluntary disclosures: make social profiles private, remove unnecessary contact details, review app permissions, and close accounts you no longer use where appropriate. Public records and information already distributed are different. A privacy setting cannot withdraw a copy another organization has collected, and a broker opt-out does not necessarily alter the official source.
When you submit an opt-out, use the specific site's official process and retain the profile URL and response. If a public record is inaccurate, contact the responsible record holder using its correction process. Legal access and correction rules depend on record type and jurisdiction; do not assume every public record can be hidden.
Why can information spread beyond the first site?
A broker may buy from another broker or use several sources to rebuild a report. That creates separate relationships between you and each organization. Removing one copy can reduce exposure at that destination without guaranteeing that the upstream source, a second broker, or a search engine changes.
What is a useful privacy audit?
Focus on fields that make it easier to locate or contact you, such as a current address, phone, or family association. Avoid creating a public inventory of your sensitive data while auditing. Keep exact URLs in a private log, request changes at the correct source, and review whether the result actually changed.
At a glance
| Possible source | Example contribution | Response to consider |
|---|---|---|
| Government record | Property or court entry | Ask the responsible office about correction or privacy rules |
| Public social profile | Contact detail or visible association | Change audience or remove the post at source |
| Another broker | Previously compiled report | Request suppression from each relevant site |
| Commercial data provider | Purchased or licensed information | Identify the controller and its privacy request route |
Trace a data-broker listing
- Save the listing URL and note which field is incorrect or unwanted.
- Check whether the page identifies its source or links to an originating record.
- Correct content at a source you control or contact the responsible record holder.
- Use the broker's official opt-out for that site's compiled listing.
- Recheck other visible copies and keep a private record of outcomes.
Frequently asked questions
Do brokers get all information from public records?
No. The FTC identifies public records, public profiles, and information purchased from other brokers among possible sources.
Can I remove an official record through a broker opt-out?
A broker request usually targets the broker's listing, not the record held by a government office.
Why did a detail return after removal?
A site may refresh or compile it from another source; identify that source and address each copy separately.
Sources
Related privacy guides
- review people-search destinations
Separate a consumer-facing broker from public or original data sources.
- see the scope of broker removals
Understand how requests address listings rather than every source in a data chain.
- compare supported removal options
Review current plan scope if recurring broker requests are useful.
- read more about broker data
Explore related articles about information collection.
More on Data Brokers
- What Are Data Brokers and Why Should You Care in 2026?
Data brokers collect, package, and sell your personal information to anyone willing to pay. There are over 4,000 data broker companies operating globally, and most people have no idea their data is being traded. Here's exactly how they work and what you can do about it.
- 5-Minute Privacy Tips to Reduce Your Digital Footprint
Simple, actionable steps you can take right now to limit the amount of personal data floating around online. From browser settings to social media tweaks, these quick wins make a real difference.
- DIY Opt-Out: How to Remove Yourself from the Top 10 Data Brokers
Step-by-step instructions for manually opting out of the biggest people-search sites including Spokeo, BeenVerified, and WhitePages. Fair warning: it takes hours and they'll re-add you within months.
About the author
Investigations & Data Privacy. Jonah covers data-broker practices, the circulation of personal information, and practical ways people can understand and reduce their online exposure.