How to Opt Out of Data Brokers: The Complete Guide
Hundreds of companies are selling your personal data right now. Removing yourself from each one takes time, persistence, and a system — but it is entirely achievable. Here's exactly how to do it, in order of priority, with no steps skipped.
Why Opting Out Matters
Before walking through the process, it's worth understanding what's at stake. Your information on data broker sites isn't just a nuisance — it's a practical risk across multiple dimensions.
Your home address is publicly searchable. Anyone can type your name into Spokeo, Whitepages, or BeenVerified and get your current address, past addresses, phone number, and the names of your household members. This is the data that enables stalking, targeted harassment, and doxxing.
Your data feeds identity theft pipelines. Fraudsters buy or scrape data broker records to gather the name, date of birth, address history, and relative information needed to impersonate someone, intercept mail, or pass identity verification questions.
Your profile influences decisions about you. Insurance underwriters, landlords, and employers use data broker-sourced records and scores. Information about past financial difficulties, health patterns inferred from purchases, or political affiliations can affect outcomes in ways you may never see.
Understanding the Scale of the Problem
There are over 4,000 data broker companies operating in the United States. Most people are not familiar with any of them.
You can think of them in a few rough categories:
- People-search sites — consumer-facing sites where anyone can look up personal details about a private individual (Spokeo, Whitepages, BeenVerified, Intelius, Radaris, TruthFinder, FastPeopleSearch, etc.)
- Marketing data companies — sell consumer segment data and contact lists to advertisers (Acxiom, Oracle Data Cloud, LiveRamp, Experian Marketing Services)
- Background check services — used by employers, landlords, and screening companies (LexisNexis Risk Solutions, Checkr, Sterling, First Advantage)
- Financial data brokers — credit bureaus and financial risk assessment providers (Equifax, TransUnion, Experian — the credit reporting side)
- Location data brokers — aggregate and sell mobile location history (X-Mode/Outlogic, SafeGraph, Veraset)
The realistic goal for most people is not to contact all 4,000+. It's to systematically cover the highest-impact brokers — particularly the people-search sites that make your home address publicly searchable — and then set up a process to catch re-registrations.
Step 1: Find Your Records
Before submitting opt-out requests, spend 15 minutes understanding your current exposure. Search for your own name on a few major people-search sites:
- Search Google for
"[Your Full Name]" "[Your City]"— the results often surface which people-search sites have indexed you - Visit Spokeo, Whitepages, and BeenVerified and search your name directly
- Search for your phone number — brokers often have reverse lookup records even when name records have been removed
This exercise typically produces a sobering picture. Most adults find their current address, past addresses, phone number, and family member names available within the first few searches. Some find detailed background reports that include employment history, court records, and financial indicators.
Screenshot anything you find that represents a particular risk — an accurate current address, a listed family member who would prefer privacy, or sensitive records. These become your priority targets.
Step 2: Prioritize Which Brokers to Target First
Not all data brokers present equal risk. Organize your opt-out effort in this order:
-
1
People-search sites with your current address
These are the highest-priority targets because they make your physical location searchable to anyone. Target any site where a search for your name returns your current home address. Common culprits: Spokeo, Whitepages, Intelius, Radaris, BeenVerified, Zabasearch, PeopleFinders, FastPeopleSearch, TruthFinder, and their affiliates.
-
2
People-search parent companies
Several of the sites above share data and ownership. Opting out of the parent company sometimes propagates to affiliated sites. For example, opting out of Intelius also covers Instant Checkmate and TruthFinder (all owned by PeopleConnect). Researching parent/affiliate relationships can multiply the impact of a single opt-out submission.
-
3
Major marketing data aggregators
Opt out of Acxiom (via their Access My Info portal), Oracle's data opt-out, and LexisNexis consumer disclosure. These companies power downstream data sharing that re-populates people-search sites — removing yourself at the source slows re-registration.
-
4
Use your state privacy rights
Residents of California and a growing number of other states have a legal right to request deletion of their personal information under their state's privacy law (CCPA/CPRA in California, plus comparable laws in Virginia, Colorado, Texas, and others). Citing that right in a deletion request is a high-leverage step — many data brokers are legally obligated to honor it.
-
5
Specialty and niche brokers
After covering the highest-risk tier, work through specialty brokers relevant to your situation: background check services if you're concerned about employment screening, health data brokers, location data companies, and advertising data platforms.
Step 3: The Opt-Out Process, Explained
Each data broker has its own process for handling deletion requests, and they vary significantly in how much friction they introduce. Here's what to expect across the main methods:
| Method | Common with | Effort | Wait time |
|---|---|---|---|
| Online web form | People-search sites, major brokers | Easy | 24–72 hours |
| Email request | Smaller brokers, EU-focused companies | Easy | 7–30 days |
| CCPA deletion request | California-registered brokers | Medium | Up to 45 days |
| ID verification form | Background check services, LexisNexis | High friction | 7–30 days |
| Mail/fax request | A minority of large brokers | High friction | 30–45 days |
Writing an Effective Email Opt-Out Request
For brokers that require email opt-out, keep the request direct and include the information needed for them to identify your record:
- Your full legal name
- Current address (and any former addresses if you know they're listed)
- Date of birth
- A direct statement: "I am submitting a deletion request for all personal information your company holds about me, including any profiles, data products, or derived information."
- If in California: "I am a California resident and this request is submitted pursuant to the California Consumer Privacy Act (CCPA/CPRA). Please confirm deletion within 45 days."
Keep a record of every request you send — date, recipient, and confirmation (if any). This documentation is useful if a broker fails to honor the request or if you need to follow up.
Step 4: Verify Your Removal
Opt-out requests are not always honored on the first attempt. Verification matters.
After submitting removal requests, wait the stated processing period (typically 7–45 days) and then check whether your records actually disappeared. Search for your name again on each site you targeted. If a record reappears, note it and re-submit the opt-out.
Some brokers send confirmation emails when deletion is complete. Save these — they're your evidence that the broker received and processed your request. If you don't receive confirmation and your record is still present after 45 days (the CCPA maximum), you have grounds for a follow-up complaint or escalation to the California Attorney General.
Common Pitfalls to Avoid
- Opting out once and assuming it's permanent. It's not. Data brokers pull fresh data from public records regularly. Your information will re-appear — typically within 3–12 months — unless you have a system to catch and re-submit removals.
- Missing affiliate sites. When you remove yourself from a major people-search site, affiliated properties under the same parent company may still have your records. Research ownership relationships before declaring a broker "done."
- Ignoring confirmation emails. Sometimes brokers send emails asking you to click a link to confirm your removal request. These time out. If you miss the confirmation email, your request may be silently discarded.
- Not covering your current address specifically. Many people-search sites have multiple profile entries for a person — old addresses, alternate name spellings, family members' records that reference you. Make sure you've removed the record that shows your current address, not just one outdated entry.
- Confusing credit opt-outs with data broker opt-outs. The credit bureaus (Equifax, TransUnion, Experian) have separate opt-out processes for different products — credit prescreening is different from data broker profiles. Make sure you're opting out of the right product for each company.
Step 5: Set Up Ongoing Removal
A one-time opt-out provides temporary protection. Sustained privacy requires a periodic cadence.
Complete initial opt-out sweep
Target all high-priority people-search sites, major aggregators, and any brokers where you found your current address. Document every submission.
Verify removals and follow up
Check that records are gone on sites you submitted to. Re-submit for any that didn't process. Collect confirmation emails.
Re-scan and re-submit as needed
Repeat your name search on the major people-search sites. Expect 15–30% of previously removed records to have re-populated. Re-submit those opt-outs. Add any new sites you discover.
Monitor for new broker entries
New data broker sites launch regularly. Periodic Google searches for your name reveal new sites that have indexed you. Add these to your opt-out list when you find them.
The Automated Approach
The manual process described above is effective, but it's time-consuming. A full initial sweep across the major brokers typically takes 10–20 hours spread over several weeks, and the ongoing maintenance commitment is several hours every quarter indefinitely.
For people who want the protection without the time investment, automated data removal services handle the submission process on your behalf. These services:
- Submit opt-out requests to hundreds of data brokers simultaneously
- Monitor for record re-registration and re-submit automatically
- Provide documentation of each submission — important for both legal evidence and peace of mind
- Handle the follow-up and confirmation tracking that manual opt-outs require
VanishMode takes this a step further by providing a timestamped screenshot for every opt-out submission — a downloadable audit report that proves not just that a request was sent, but that the broker's system actually processed it. This level of documentation matters for privacy-conscious individuals who want verifiable proof, not just someone's word that the work was done.
Reduce Future Data Collection
Removing your data from existing broker files is only half the picture. Data brokers continuously ingest fresh data from public records, apps, and data-sharing agreements. Reducing the rate at which your information re-enters these pipelines makes your opt-outs last longer.
- Audit app location permissions. Apps that don't need your location often request it anyway. Revoke location access for apps that have no legitimate need — or set location access to "Only while using" rather than "Always."
- Use a secondary email for loyalty programs. Retail loyalty cards and subscription services are significant data broker inputs. Using a dedicated email address for these accounts limits cross-referencing with your primary identity.
- Opt out of credit prescreening. Visit OptOutPrescreen.com (operated by the major credit bureaus) to stop prescreened credit and insurance offers, which also reduces certain broker data flows.
- Review social media privacy settings. Public social media profiles are scraped by data brokers. Auditing who can see your posts, location tags, and contact information reduces what's publicly available.
- Suppress your voter registration where possible. Some states allow you to request that your voter registration record be withheld from commercial data brokers. Check your state's election administration website.
What to Expect
Realistic expectations are important for staying motivated through the process. Here's what typically happens:
- Major people-search sites usually remove records within 24–72 hours of a properly submitted opt-out
- Larger data aggregators take longer — up to 45 days for CCPA requests
- Approximately 15–30% of removed records re-appear within 90 days from new public records pulls
- After 2–3 rounds of opt-outs, re-registration rates typically stabilize and decline as you're no longer in fresh data feeds
- Complete removal from all brokers is not achievable, but a significant reduction in exposure — especially from people-search sites — is realistic
Data privacy is not a one-time event. It's a habit. But the return on the initial investment — particularly the removal of your current home address from publicly searchable people-search sites — is substantial and immediate.
If you want to understand who data brokers are and how they operate before diving into removals, start with our full explainer on the data broker industry.