Quick answer: how data brokers get personal information
Data brokers and people-search sites collect personal information from sources that are legally accessible to them - primarily public records, marketing data, and commercially licensed data purchases. They do not obtain data by accessing private accounts, reading private messages, or bypassing any authentication system.
The practical consequence for consumers is significant: because the underlying source data is either public or commercially traded, submitting a removal request to one broker does not remove your information from the original source, and it does not prevent other brokers from re-collecting the same information from that source later.
Understanding acquisition channels before you start opt-out submissions helps you set accurate expectations and prioritize where to focus first. For step-by-step removal instructions, see the data broker removal guide.
How this page relates to other guides: This article explains where broker data comes from. Data Broker Removal Guide owns removal strategy; Data Broker Opt-Out Request covers what to send and track per company.
Legal and compliance notice
Legal notice: Lookup Plainly is an informational publisher, not a Consumer Reporting Agency (CRA). Nothing on this page constitutes legal advice. No information here may be used to make decisions about employment, housing, credit, insurance, rental eligibility decisions, or any other regulated purpose under the Fair Credit Reporting Act (FCRA). For official record inquiries, contact the relevant government agency directly.
What counts as a data broker vs a people-search site
The terms "data broker" and "people-search site" are often used interchangeably, but they describe related but distinct business models.
Data brokers are companies whose primary activity is collecting, processing, and selling or licensing personal information. Their customers are usually other businesses - advertisers, insurers, market researchers, and other data companies. Most consumers never interact directly with a data broker.
People-search sites are a consumer-facing subset of data brokers. They package aggregated personal information into publicly searchable directories that individuals can query by name, phone number, or address. The category includes services that display estimated current addresses, historical addresses, phone numbers, and lists of possible relatives or associates.
Both types of companies are subject to federal and, in some states, additional state privacy laws. The Federal Trade Commission (FTC) has published guidance on data brokers that describes their role in the broader data ecosystem.
| | Data broker | People-search site | |---|---|---| | Primary customer | Businesses | Individuals | | Data format | Bulk, licensed | Individual searchable profiles | | Consumer visibility | Low | High | | Opt-out process | Varies widely by company | Usually a web form | | Reappearance risk | High (downstream resale) | High (re-aggregation from sources) |
For a broader overview of what people-search sites are and how they operate as a category, see the people-search category overview.
Common information sources (high-level categories)
Data brokers draw from a range of sources. The categories below represent the most commonly cited acquisition channels. The list is not exhaustive, and individual companies vary in which sources they use.
Public records
Government agencies create and publish a large volume of records as a legal requirement. These include property ownership and transfer records, voter registration rolls, court filings, business and professional licenses, birth and death records (in many jurisdictions), and marriage and divorce filings.
Public records are maintained and controlled by the relevant government agency or court clerk. A data broker that lists information sourced from a public record cannot remove that information from the originating agency. A suppression request sent to a broker may suppress that broker's listing, but the original record remains at the source institution. For a detailed explanation of what public records are and what limits apply to their correction, see public records explained.
Marketing and transactional data
When consumers complete warranty registrations, loyalty program enrollments, contest entries, catalog subscriptions, or online checkout forms, the information provided is frequently sold or licensed to data brokers under terms the consumer accepted. This is sometimes described as self-submitted data because the consumer entered it voluntarily, even if the downstream redistribution was not apparent at the time.
Email addresses, phone numbers, estimated household income brackets, and product preference data are common data points collected through this channel.
Data purchased from other brokers
Data brokers routinely purchase data from other data brokers. This means that a profile displayed on one people-search site may have been assembled from dozens of upstream sources, including other brokers who in turn bought from other brokers. This inter-broker trading is one of the primary structural reasons why opt-out suppression requests do not propagate across the industry: each company holds its own copy, and a request sent to one company does not reach the others.
Aggregated and inferred data
In addition to directly sourced records, some brokers infer attributes - estimated household income, interests, purchasing behavior, or life-stage segments - from patterns in the data they already hold. These inferred attributes may or may not reflect reality. They are calculated estimates, not records sourced from an official document.
Publicly visible online content
Publicly accessible social media profiles, online business directories, and web-crawled content can contribute to broker profiles. Information a consumer posted publicly - such as a business phone number on a public professional profile - may be harvested and incorporated into a broker's database.
This does not include access to private account data, direct messages, private posts, or any information that requires authentication to view.
Why profiles combine names, addresses, phones, and relatives
Data brokers use identity-matching algorithms to link records they believe belong to the same person. This process - sometimes called entity resolution or record linkage - attempts to connect records that share overlapping attributes, such as a name and address combination that appears across multiple sources, or a phone number that appears in both a property record and a marketing file.
The result is a consolidated profile that may include current and historical addresses, current and historical phone numbers, email addresses from multiple time periods, estimated age derived from public records, and lists of individuals who have lived at or been linked to the same addresses.
Why relatives and associates appear in your profile: Address co-occurrence is one of the most commonly used linking signals. People who have lived with you - family members, former roommates, or previous partners - may appear in your profile as associated individuals or possible relatives. This is a structural artifact of how address records are used as matching keys, not the result of intentional family profiling. The label "possible relative" or "associate" reflects a shared address in some data source, not a confirmed relationship.
Why old addresses persist: Brokers frequently retain historical address data even after a current address changes, because past addresses are used to de-duplicate and match records across sources. Submitting a suppression request for a current listing may leave historical records visible at other services that hold older data.
Accuracy problems and stale data
Broker profiles frequently contain errors, outdated information, or records that have been incorrectly merged. Common accuracy problems include:
- Name conflation: Individuals with common names may have records from different people merged into a single profile.
- Address carryover: Addresses may persist for years after a move because source records are updated on irregular schedules.
- Phone number reassignment: A phone number previously assigned to another person may appear on your profile if a carrier transferred that number to you.
- Associate misidentification: Individuals listed as relatives or associates may be former neighbors, building residents, or people whose records happened to share an address at some point.
- Inferred attribute errors: Estimated data points - income brackets, interests, purchasing predictions - are calculations, not records, and may be inaccurate.
Errors in a broker profile do not necessarily correspond to errors in an underlying public record. The two systems are separate. If a misspelling or factual error exists in an original court filing or property record, correcting it requires contacting the government agency that holds the original record - not the data broker that copied the information.
What broker collection does not mean legally
Understanding what data broker collection does not permit is as important as understanding what it does.
Collection is not consent to any use
The fact that a data broker holds information about you does not mean that information can be used for any purpose. The Fair Credit Reporting Act (FCRA) imposes specific requirements on how certain consumer reports may be used. Reports used in employment decisions, credit determinations, housing decisions, or insurance underwriting must comply with FCRA requirements, including consumer notification rights and dispute procedures.
Most consumer-facing people-search sites are not FCRA-compliant consumer reporting agencies. Their data may not lawfully be used for regulated decisions - and consumers cannot invoke FCRA dispute processes against sites that are not operating as CRAs. For a full explanation of the FCRA and its scope, see what is FCRA.
A suppression request is not data deletion
When you submit a removal or suppression request to a data broker, you are asking that specific company to suppress your listing from its own publicly searchable system. You are not deleting information from every system that holds it. The broker may retain your data internally, and a listing may reappear if the broker re-processes its source feeds in a future update.
A broker profile is not an official record
A people-search profile is a commercial product, not a government document. It is not maintained by any government agency and carries no legal authority. Nothing listed in a broker profile - including estimated age, address history, or a list of possible relatives - has official standing or constitutes a verified fact about any person.
| Common assumption | Accurate framing | |---|---| | Submitting one opt-out removes my data everywhere | A suppression request affects one site's listing only; other brokers are unaffected | | My profile is wrong so I can file a dispute | FCRA dispute rights apply to CRAs; most people-search sites are not CRAs | | Removing the broker listing removes the underlying record | Public records remain at the source agency regardless of broker suppression requests | | Information in a broker profile has been verified | Broker profiles are commercial aggregations; accuracy is not independently verified | | My profile won't come back once I opt out | Re-aggregation from source feeds can cause profiles to reappear after suppression |
How understanding sources improves opt-out prioritization
Knowing where broker data originates helps you prioritize where to spend your effort, what to expect, and when to recheck.
Phase 1: Assess your current exposure
Before submitting any requests, take stock of what is currently visible about you across public records and broker listings. The guide to what information is public online covers how to inventory your current exposure across both categories.
Phase 2: Start with high-visibility consumer-facing sites
People-search sites that aggregate from many sources and display profiles directly in consumer search results are the highest-visibility starting point for most people. These are the sites most likely to appear when someone searches your name. For a structured suppression process covering the major sites in this category, see how to remove yourself from people-search sites.
Phase 3: Extend to broader data broker suppression
For brokers that sell data to businesses rather than displaying consumer-facing directories, see the data broker removal guide for a broader strategy.
Phase 4: Recheck at regular intervals
Because brokers re-process source feeds on varying schedules, suppressed listings may reappear weeks or months later. A one-time submission is typically not sufficient for ongoing exposure reduction. Building a recheck cadence into your privacy routine is more durable than a single campaign.
Opt-out prioritization checklist
- [ ] Search your name on major people-search sites to establish a baseline of what is currently visible
- [ ] Note which sites display a current address, phone number, or workplace
- [ ] Submit suppression requests to the highest-visibility sites first
- [ ] Record submission dates and confirmation numbers for each request
- [ ] Verify removal within each site's stated processing window
- [ ] Schedule a recheck 60–90 days after initial submissions
- [ ] Resubmit for any profiles that have reappeared
| Exposure type | Action available | Limit | |---|---|---| | People-search profile listing | Submit suppression request to that site | Other sites are unaffected by the request | | Public record at a government agency | Contact the agency; correction rules vary by record type | A lawfully created record cannot be removed via broker forms | | Marketing list entry | Opt out through direct channels or marketing preference registries | Not all marketers participate in such registries | | Inferred or estimated attribute | Submit request to the broker | Broker may re-calculate the attribute from retained data | | Search engine snippet displaying broker content | Use search engine removal tools for eligible content types | Snippet suppression does not remove the underlying source page |
Regulated uses you must avoid
This page and any information derived from it may not be used to:
- Screen applicants for housing or tenancy
- Inform or influence employment decisions
- Assess eligibility for credit or insurance
- Attempt to verify the identity of any individual
- Locate or monitor any individual without their knowledge and consent
- Facilitate unwanted contact, harassment, or any form of stalking
Many of these uses are governed by federal law, including the FCRA and the FTC Act. Using consumer data in ways that violate those laws can carry legal consequences for the person who misuses it.
Frequently asked questions
Do data brokers hack private accounts?
No. Data brokers collect information from sources that are legally accessible to them: public records, marketing data, and commercial data purchases. They do not access private accounts, banking records, private messages, or any information that requires credentials or authentication to view.
Are public records the same as broker profiles?
No. Public records are official documents created and maintained by government agencies and courts. Data broker profiles are commercial products assembled by combining and processing data from public records alongside other sources. An error in a broker profile does not mean the original record contains an error, and correcting a broker listing does not affect the underlying official record at the source agency.
Why do brokers list my relatives?
Relatives and associates appear in profiles because data brokers use address co-occurrence as a record-linking signal. People who have lived at the same address - family members, former roommates, or previous partners - may appear as associated individuals. This is a structural artifact of address-based matching algorithms, not a deliberate effort to map family relationships.
Can I stop brokers from collecting data in the future?
There is no single mechanism that prevents all data brokers from collecting publicly available information. Some state privacy laws give residents rights to opt out of certain types of data sale or processing, but those rights vary by state and do not apply universally to all collection methods. Limiting voluntary form submissions can reduce what enters the pipeline, but it cannot eliminate collection from existing public record sources.
Does paying for removal stop resale?
No paid removal service can prevent all future re-aggregation of data that remains publicly available at source. Paid services typically submit suppression requests to a list of known brokers on your behalf and may resubmit on a recurring schedule. They cannot access brokers' internal databases, remove original public records, or reach brokers who acquire your data from a third party after the requests are submitted.
Is people-search data always accurate?
No. People-search profiles frequently contain outdated, incorrect, or conflated information. Common problems include stale address data, misidentified relatives, phone numbers previously assigned to someone else, and inferred attributes that are estimates rather than records. A listing on a people-search site does not verify or confirm any fact about an individual.
How does this relate to FCRA?
The Fair Credit Reporting Act governs how Consumer Reporting Agencies may collect, maintain, and distribute consumer information used in regulated decisions such as employment screening and credit underwriting. Most consumer-facing people-search sites are not FCRA-regulated CRAs, which means FCRA dispute and correction rights do not apply to them - and their data may not lawfully be used for regulated decisions. For a full explanation, see what is FCRA.
Where do I start opting out?
For most consumers, the practical starting point is submitting suppression requests to the major people-search sites that display consumer-facing profiles in search results. See how to remove yourself from people-search sites for a structured process. For a broader data broker strategy, see the data broker removal guide.
What to do next after you understand broker sources
Use this short action map before you start opt-out forms. It keeps acquisition knowledge separate from execution.
| Step | Action | Where to read more | |------|--------|-------------------| | 1 | Inventory which people-search or broker sites show your name | Remove yourself from people-search sites | | 2 | Submit suppression requests site by site | Data broker removal guide | | 3 | Reduce contact data exposure (phone, email, address) | Batch 6 channel guides and remove personal information online | | 4 | Schedule a 60-90 day recheck | Online privacy checklist |
Documentation habit: Record site name, date submitted, confirmation received, and next recheck date. Avoid copying full profile text into your log.
When to use official fraud resources: If exposure involves identity theft, account takeover, or financial fraud, use the FTC IdentityTheft.gov recovery path cited in our source registry - not broker opt-outs alone.
What this page does not do
This page explains how data brokers typically acquire personal information. It does not:
- Provide a list, ranking, or review of data removal services
- Recommend any paid or free removal product
- Constitute legal advice or a legal opinion on any matter
- Remove, suppress, or modify any listing at any data broker or people-search site
- Confirm or deny whether any specific individual's information appears in any database
- Explain how to locate, monitor, or contact any individual
- Provide step-by-step opt-out instructions for any specific site - for that, see the data broker removal guide
No information on this page substitutes for advice from a licensed attorney. If you believe your rights under the FCRA or a state privacy law have been violated, consult a qualified legal professional or contact the FTC directly.
Official records - court documents, property records, voter registrations - are controlled by the government agencies that maintain them. Lookup Plainly has no relationship with, and no ability to modify records at, any government agency or court.