How Data Brokers Get Your Information: Sources, Limits, and Safer Next Steps

Data brokers and people-search sites collect personal information from public records, marketing data, and other commercially licensed sources - not from private accounts. Understanding where that data comes from helps set realistic expectations before submitting opt-out requests, because no single suppression request removes all copies or prevents future re-aggregation.

Short answer

Data brokers and people-search sites collect personal information from public records, marketing data, and other commercially licensed sources - not from private accounts.

What not to assume

  • Do not assume casual lookup data equals a regulated consumer report.
  • Do not assume marketing language matches legal definitions.
  • Do not use this article as legal advice or as proof about a specific person.

Safer next steps

  • Read related FCRA, public records, and privacy guides on Lookup Plainly.
  • Consult licensed professionals for case-specific legal questions.
  • Apply directory data only within appropriate, non-regulated contexts.

Key takeaways

Quick answer: how data brokers get personal information

Data brokers and people-search sites collect personal information from sources that are legally accessible to them - primarily public records, marketing data and commercially licensed data purchases. They do not obtain data by accessing private accounts, reading private messages, or bypassing any authentication system.

The practical consequence for consumers is significant: because the underlying source data is either public or commercially traded, submitting a removal request to one broker does not remove your information from the original source, and it does not prevent other brokers from re-collecting the same information from that source later.

Understanding acquisition channels before you start opt-out submissions helps you set accurate expectations and prioritize where to focus first. For step-by-step removal instructions, see the data broker removal guide.

How this page relates to other guides: This article explains where broker data comes from. Data Broker Removal Guide owns removal strategy; Data Broker Opt-Out Request covers what to send and track per company.


Legal and compliance notice

Legal notice: Lookup Plainly is an informational publisher, not a Consumer Reporting Agency (CRA). Nothing on this page constitutes legal advice. No information here may be used to make decisions about employment, housing, credit, insurance, rental eligibility decisions, or any other regulated purpose under the Fair Credit Reporting Act (FCRA). For official record inquiries, contact the relevant government agency directly.

What counts as a data broker vs a people-search site

The terms "data broker" and "people-search site" are often used interchangeably, but they describe related but distinct business models.

Data brokers are companies whose primary activity is collecting, processing, and selling or licensing personal information. Their customers are usually other businesses - advertisers, insurers, market researchers, and other data companies. Most consumers never interact directly with a data broker.

People-search sites are a consumer-facing subset of data brokers. They package aggregated personal information into publicly searchable directories that individuals can query by name, phone number, or address. The category includes services that display estimated current addresses, historical addresses, phone numbers, and lists of possible relatives or associates.

Both types of companies are subject to federal and, in some states, additional state privacy laws. The Federal Trade Commission (FTC) has published guidance on data brokers that describes their role in the broader data ecosystem.

Data brokerPeople-search site
Primary customerBusinessesIndividuals
Data formatBulk, licensedIndividual searchable profiles
Consumer visibilityLowHigh
Opt-out processVaries widely by companyUsually a web form
Reappearance riskHigh (downstream resale)High (re-aggregation from sources)

For a broader overview of what people-search sites are and how they operate as a category, see the people-search category overview. Provider-specific pages such as Anywho and Zabasearch search show how the same broker-data limits appear on individual directory-style lookups.


Common information sources (high-level categories)

Data brokers draw from a range of sources. The categories below represent the most commonly cited acquisition channels. The list is not exhaustive, and individual companies vary in which sources they use.

Public records

Government agencies create and publish a large volume of records as a legal requirement. These include property ownership and transfer records, voter registration rolls, court filings, business and professional licenses, birth and death records (in many jurisdictions), and marriage and divorce filings.

Official public data can also be statistical rather than personal. U.S. Census Bureau explains why aggregate Census information can describe places and populations without confirming who lives at an address or owns a phone number. For a licensing example, DBPR license search shows how a public license record can help with a narrow Florida licensing question while still staying separate from people-search profiles.

Public records are maintained and controlled by the relevant government agency or court clerk. A data broker that lists information sourced from a public record cannot remove that information from the originating agency. A suppression request sent to a broker may suppress that broker's listing, but the original record remains at the source institution. For a detailed explanation of what public records are and what limits apply to their correction, see public records explained.

Marketing and transactional data

When consumers complete warranty registrations, loyalty program enrollments, contest entries, catalog subscriptions, or online checkout forms, the information provided is frequently sold or licensed to data brokers under terms the consumer accepted. This is sometimes described as self-submitted data because the consumer entered it voluntarily, even if the downstream redistribution was not apparent at the time.

Email addresses, phone numbers, estimated household income brackets, and product preference data are common data points collected through this channel.

Data purchased from other brokers

Data brokers routinely purchase data from other data brokers. This means that a profile displayed on one people-search site may have been assembled from dozens of upstream sources, including other brokers who in turn bought from other brokers. This inter-broker trading is one of the primary structural reasons why opt-out suppression requests do not propagate across the industry: each company holds its own copy, and a request sent to one company does not reach the others.

Aggregated and inferred data

In addition to directly sourced records, some brokers infer attributes - estimated household income, interests, purchasing behavior, or life-stage segments - from patterns in the data they already hold. These inferred attributes may or may not reflect reality. They are calculated estimates, not records sourced from an official document.

Publicly visible online content

Publicly accessible social media profiles, online business directories, and web-crawled content can contribute to broker profiles. Information a consumer posted publicly - such as a business phone number on a public professional profile - may be harvested and incorporated into a broker's database. Small-business records can also blur personal and business exposure; lookup FEIN number covers that business-identifier edge case without treating directory matches as proof.

This does not include access to private account data, direct messages, private posts, or any information that requires authentication to view.


Why profiles combine names, addresses, phones, and relatives

Data brokers use identity-matching algorithms to link records they believe belong to the same person. This process - sometimes called entity resolution or record linkage - attempts to connect records that share overlapping attributes, such as a name and address combination that appears across multiple sources, or a phone number that appears in both a property record and a marketing file.

The result is a consolidated profile that may include current and historical addresses, current and historical phone numbers, email addresses from multiple time periods, estimated age derived from public records, and lists of individuals who have lived at or been linked to the same addresses.

Why relatives and associates appear in your profile: Address co-occurrence is one of the most commonly used linking signals. People who have lived with you - family members, former roommates, or previous partners - may appear in your profile as associated individuals or possible relatives. This is a structural artifact of how address records are used as matching keys, not the result of intentional family profiling. The label "possible relative" or "associate" reflects a shared address in some data source, not a confirmed relationship.

Why old addresses persist: Brokers frequently retain historical address data even after a current address changes, because past addresses are used to de-duplicate and match records across sources. Submitting a suppression request for a current listing may leave historical records visible at other services that hold older data.


Accuracy problems and stale data

Broker profiles frequently contain errors, outdated information, or records that have been incorrectly merged. Common accuracy problems include:

Errors in a broker profile do not necessarily correspond to errors in an underlying public record. The two systems are separate. If a misspelling or factual error exists in an original court filing or property record, correcting it requires contacting the government agency that holds the original record - not the data broker that copied the information.


What broker collection does not mean legally

Understanding what data broker collection does not permit is as important as understanding what it does.

Collection is not consent to any use

The fact that a data broker holds information about you does not mean that information can be used for any purpose. The Fair Credit Reporting Act (FCRA) imposes specific requirements on how certain consumer reports may be used. Reports used in employment decisions, credit determinations, housing decisions, or insurance underwriting must comply with FCRA requirements, including consumer notification rights and dispute procedures.

Most consumer-facing people-search sites are not FCRA-compliant consumer reporting agencies. Their data may not lawfully be used for regulated decisions - and consumers cannot invoke FCRA dispute processes against sites that are not operating as CRAs. For a full explanation of the FCRA and its scope, see what is FCRA.

A suppression request is not data deletion

When you submit a removal or suppression request to a data broker, you are asking that specific company to suppress your listing from its own publicly searchable system. You are not deleting information from every system that holds it. The broker may retain your data internally, and a listing may reappear if the broker re-processes its source feeds in a future update.

A broker profile is not an official record

A people-search profile is a commercial product, not a government document. It is not maintained by any government agency and carries no legal authority. Nothing listed in a broker profile - including estimated age, address history, or a list of possible relatives - has official standing or constitutes a verified fact about any person.

Common assumptionAccurate framing
Submitting one opt-out removes my data everywhereA suppression request affects one site's listing only; other brokers are unaffected
My profile is wrong so I can file a disputeFCRA dispute rights apply to CRAs; most people-search sites are not CRAs
Removing the broker listing removes the underlying recordPublic records remain at the source agency regardless of broker suppression requests
Information in a broker profile has been verifiedBroker profiles are commercial aggregations; accuracy is not independently verified
My profile won't come back once I opt outRe-aggregation from source feeds can cause profiles to reappear after suppression

How understanding sources improves opt-out prioritization

Knowing where broker data originates helps you prioritize where to spend your effort, what to expect, and when to recheck.

Phase 1: Assess your current exposure

Before submitting any requests, take stock of what is currently visible about you across public records and broker listings. The guide to what information is public online covers how to inventory your current exposure across both categories.

Phase 2: Start with high-visibility consumer-facing sites

People-search sites that aggregate from many sources and display profiles directly in consumer search results are the highest-visibility starting point for most people. These are the sites most likely to appear when someone searches your name. For a structured suppression process covering the major sites in this category, see how to remove yourself from people-search sites.

Phase 3: Extend to broader data broker suppression

For brokers that sell data to businesses rather than displaying consumer-facing directories, see the data broker removal guide for a broader strategy.

Phase 4: Recheck at regular intervals

Because brokers re-process source feeds on varying schedules, suppressed listings may reappear weeks or months later. A one-time submission is typically not sufficient for ongoing exposure reduction. Building a recheck cadence into your privacy routine is more durable than a single campaign.

Opt-out prioritization checklist

Exposure typeAction availableLimit
People-search profile listingSubmit suppression request to that siteOther sites are unaffected by the request
Public record at a government agencyContact the agency; correction rules vary by record typeA lawfully created record cannot be removed via broker forms
Marketing list entryOpt out through direct channels or marketing preference registriesNot all marketers participate in such registries
Inferred or estimated attributeSubmit request to the brokerBroker may re-calculate the attribute from retained data
Search engine snippet displaying broker contentUse search engine removal tools for eligible content typesSnippet suppression does not remove the underlying source page

Regulated uses you must avoid

This page and any information derived from it may not be used to:

Many of these uses are governed by federal law, including the FCRA and the FTC Act. Using consumer data in ways that violate those laws can carry legal consequences for the person who misuses it.


Frequently asked questions

Do data brokers hack private accounts?

No. Data brokers collect information from sources that are legally accessible to them: public records, marketing data, and commercial data purchases. They do not access private accounts, banking records, private messages, or any information that requires credentials or authentication to view.

Are public records the same as broker profiles?

No. Public records are official documents created and maintained by government agencies and courts. Data broker profiles are commercial products assembled by combining and processing data from public records alongside other sources. An error in a broker profile does not mean the original record contains an error, and correcting a broker listing does not affect the underlying official record at the source agency.

Why do brokers list my relatives?

Relatives and associates appear in profiles because data brokers use address co-occurrence as a record-linking signal. People who have lived at the same address - family members, former roommates, or previous partners - may appear as associated individuals. This is a structural artifact of address-based matching algorithms, not a deliberate effort to map family relationships.

Can I stop brokers from collecting data in the future?

There is no single mechanism that prevents all data brokers from collecting publicly available information. Some state privacy laws give residents rights to opt out of certain types of data sale or processing, but those rights vary by state and do not apply universally to all collection methods. Limiting voluntary form submissions can reduce what enters the pipeline, but it cannot eliminate collection from existing public record sources.

Does paying for removal stop resale?

No paid removal service can prevent all future re-aggregation of data that remains publicly available at source. Paid services typically submit suppression requests to a list of known brokers on your behalf and may resubmit on a recurring schedule. They cannot access brokers' internal databases, remove original public records, or reach brokers who acquire your data from a third party after the requests are submitted.

Is people-search data always accurate?

No. People-search profiles frequently contain outdated, incorrect, or conflated information. Common problems include stale address data, misidentified relatives, phone numbers previously assigned to someone else, and inferred attributes that are estimates rather than records. A listing on a people-search site does not verify or confirm any fact about an individual.

How does this relate to FCRA?

The Fair Credit Reporting Act governs how Consumer Reporting Agencies may collect, maintain, and distribute consumer information used in regulated decisions such as employment screening and credit underwriting. Most consumer-facing people-search sites are not FCRA-regulated CRAs, which means FCRA dispute and correction rights do not apply to them - and their data may not lawfully be used for regulated decisions. For a full explanation, see what is FCRA.

Where do I start opting out?

For most consumers, the practical starting point is submitting suppression requests to the major people-search sites that display consumer-facing profiles in search results. See how to remove yourself from people-search sites for a structured process. For a broader data broker strategy, see the data broker removal guide.


What to do next after you understand broker sources

Use this short action map before you start opt-out forms. It keeps acquisition knowledge separate from execution.

StepActionWhere to read more
1Inventory which people-search or broker sites show your nameRemove yourself from people-search sites
2Submit suppression requests site by siteData broker removal guide
3Reduce contact data exposure (phone, email, address)Batch 6 channel guides and remove personal information online
4Schedule a 60-90 day recheckOnline privacy checklist

Documentation habit: Record site name, date submitted, confirmation received, and next recheck date. Avoid copying full profile text into your log.

When to use official fraud resources: If exposure involves identity theft, account takeover, or financial fraud, use the FTC IdentityTheft.gov recovery path cited in our source registry - not broker opt-outs alone.

What this page does not do

This page explains how data brokers typically acquire personal information. It does not:

No information on this page substitutes for advice from a licensed attorney. If you believe your rights under the FCRA or a state privacy law have been violated, consult a qualified legal professional or contact the FTC directly.

Official records - court documents, property records, voter registrations - are controlled by the government agencies that maintain them. Lookup Plainly has no relationship with, and no ability to modify records at, any government agency or court.

Important use limitation

Lookup Plainly is not a Consumer Reporting Agency and does not provide consumer reports, background checks, live lookup results, or identity verification. Information on this site must not be used for employment, tenant screening, credit, insurance, or any other regulated eligibility decision.

This article is general information only. It is not legal advice and does not replace official records, carriers, or regulators.

Where this guide fits

This guide is part of the People search and public records topic area.

Guides about people-search directories, public-record-style online data, profile accuracy limits, and how broker listings differ from official records.

People-search and public-record guides describe compiled directory data that can be stale, incomplete, or attached to the wrong person.

These related guides continue the same topic without treating lookup results as proof.

Sources and references

Lookup Plainly articles are written for careful, general education. Editorial and legal review may update wording as sources and policies change.