What is a data broker? In simple terms, data brokers are companies that collect, organize, combine, analyze, and sell personal information or audience labels. The FTC describes the issue plainly: many people have never directly interacted with these companies, yet may already appear in their databases.［1］

The uncomfortable part is not just that "someone sells data." It is that the data often comes from more sources than you can realistically count.

Registration forms, public records, commercial partners, app data, location data, and online behavior can all be turned into searchable, sellable, targetable profiles.［1］［2］

Use the digital privacy guide as the wider checklist: it connects this issue to accounts, devices, identifiers, and data-broker exposure.

Key Takeaways

A data broker's core business is collecting and selling personal information or user labels.［1］

Not registering with a broker does not mean it has no record of you.

The risk is not just annoying ads. It is increasingly detailed identity profiles flowing to unseen third parties.

The most effective response is usually not one setting change, but reducing exposure and submitting opt-out requests.

Where do data brokers get data?

Their sources are usually more varied than people expect.

Common sources include:

Public records;
Data shared by commercial partners;
Behavioral data collected by websites and apps;
Location and device signals;
Demographic, spending, and interest labels.［1］［2］

That means a data broker may have enough information about you even if you never submitted anything to that company directly.

What do they usually sell?

It is not always an extreme raw list of identity numbers. More often, they sell:

Contact information;
Current or past home addresses;
Age range, household structure, and income range;
Shopping interests, lifestyle patterns, and location preferences;
Sensitive labels that may be inferred from other data.［1］

Once this information is combined, it becomes easier to infer who you are.

Why do data brokers make people uneasy?

Because you often cannot see the full chain.

Problem	Why it matters
Scattered sources	You may not know where the information originally came from
Hidden transfers	Data may be resold or shared multiple times
Profile building	Small details can become a complete profile
High opt-out cost	Removal processes are fragmented and often repeat

Worse, deleting one platform account does not mean the outside data-broker ecosystem automatically deletes the record it already holds.

If you want to start with the personal information that is easiest to find online, read How to remove personal information from the internet: start with the most searchable data (2026).

Are data brokers the same as people search sites?

People search sites are one of the more visible forms of this ecosystem. They turn names, addresses, ages, relatives, phone numbers, and similar details into searchable pages, making it very clear that strangers really can look you up.［2］

If you are already dealing with public people-search listings, use How to remove personal information from the internet: start with the most searchable data (2026) alongside it.

What is the practical risk for ordinary people?

Not everyone will immediately face the worst-case scenario, but data brokers steadily increase these risks:

Targeted phishing and social engineering;
Robocalls, spam, and scam contact;
Location and lifestyle pattern matching;
Identity profiles used for advertising, screening, or other purposes you may never see.［1］［2］

That is one reason people feel that scammers are getting strangely specific. The issue is not always a single platform.

If you suspect public information about you is being combined and used, revisit Who is tracking you? A simple view of your online footprint.

To understand how collected data becomes a long-term exposure surface, read What is a digital footprint? Active traces, passive traces, and why cleanup is harder than it looks.

How can ordinary people reduce the impact?

I would approach it from two directions at once.

First: reduce future collection

Share fewer optional fields;
Tighten app permissions, especially location and contacts;
Stop reusing your main email address and main phone number everywhere;
Avoid unnecessary third-party logins.

Second: pull back what is already exposed

Submit manual people-search and data-broker opt-outs;
Remove publicly searchable profile pages where possible;
Regularly check the platforms most likely to expose contact details and home addresses.

If you do not want to handle every site manually, read Are data removal services worth it? When to do it yourself and when to pay (2026).

If you want to practice on a typical site first, How to opt out of Whitepages: 8 steps to remove your listing and reduce relisting (2026) is a practical starting point.

Why do removed records keep coming back?

Because there may be more than one data source. You remove a listing from site A today, and site B may sync a new copy from another partner tomorrow.

This is more like long-term maintenance than a one-time deletion.

My take: start with the layer that exposes your contact details and home address

That layer is easiest for harassment, scams, and social engineering to use directly. It is also relatively concrete to handle, so the payoff can be faster.

An article like Whitepages opt-out guide: how to remove your information (2026) works well as a first-step template.

If you want to combine "reduce future collection" and "recover already exposed information" into one strategy, return to the complete digital privacy guide for 2026.

Summary

What is a data broker? It is a company that collects, combines, and sells personal information or user labels.［1］
You may be listed even if you never registered with the broker.
The risk is that scattered data can become a tradable, usable profile.［1］［2］
To reduce the impact, shrink future collection and pull back exposed information at the same time.

FAQ

Are data brokers always illegal?

No blanket answer fits every case. The question is whether their collection, sharing, and selling practices comply with local law and disclosure requirements.

I never registered with these sites. Why do they have my information?

Data brokers may obtain information from public records, partners, third-party data sources, and other commercial channels.［1］

Are data brokers the same as ad platforms?

They overlap, but they are not identical. Ad platforms focus more on ad delivery ecosystems, while data brokers focus more on collecting, organizing, and trading data itself.

Do manual opt-outs work?

Yes, but they are often not one-and-done. Different sites and data sources may resync records over time.

What should I remove first?

Start with information that can directly expose your address, phone number, email, and family relationships.

Are data removal services worth it?

They may be worth it if you have many sites to handle and little time. They do not replace daily habits that reduce your exposure.

Disclaimer

This article is for general privacy education only. Rules for data brokers, deletion requests, and consumer rights vary by country and region.

For “What is a data broker”, AethoVPN cannot replace checks beyond the network path.

Sources

FTC, Data Brokers: A Call for Transparency and Accountability: https://www.ftc.gov/reports/data-brokers-call-transparency-accountability-report-federal-trade-commission-may-2014
FTC Consumer Advice, How to remove your personal information from people search sites: https://consumer.ftc.gov/articles/how-remove-your-personal-information-people-search-sites

Sources checked 8 May 2026.

Related Articles:

What is a data broker