privacyhow-to

Your Name, Address, and Photos Are on Data Broker Sites

Thousands of data broker sites compile your personal details and photos from public records. Here's how that works, and how to start removing it.

Search your own name online, and there’s a good chance you’ll find a page on a site you’ve never visited, listing your age, current and past addresses, phone numbers, relatives’ names, and sometimes a photo — all compiled without your involvement and offered up to anyone willing to pay a few dollars for a “full report.”

These are people-search sites, and they’re the consumer-facing edge of a much larger industry: data brokers. The FTC estimates there are more than 4,000 data brokers operating in the United States alone, most of which most people have never heard of and never knowingly gave information to.


Where This Information Actually Comes From

Data brokers don’t typically hack anything to get your information — they aggregate it from sources that are technically public or semi-public, and then package it into searchable profiles.

Public records are the foundation: property records, voter registrations, court filings, marriage and divorce records, and business licenses are all government records that are legally accessible, and brokers scrape them at scale.

Data from other companies fills in the rest. Loyalty programs, warranty registrations, app permissions, and “data sharing partners” buried in privacy policies all feed information into a secondary market, where it’s bought, sold, and combined with the public records to build a fuller picture.

Photos often come along for the ride — pulled from social media profiles, old public listings, or in some cases professional headshots and property listings — and get attached to the profile as a visual identifier.

The result is a profile that feels like it shouldn’t exist, built entirely from pieces that, individually, were each technically available somewhere.


Why This Keeps Happening, Even After You Opt Out

Most major people-search sites offer an opt-out process — but the way the industry is structured makes it a recurring chore rather than a one-time fix.

Most brokers refresh their databases every 60 to 180 days, re-ingesting from the same public records sources that generated your profile in the first place. An opt-out removes your current listing, but it doesn’t stop the underlying public records from existing, so a new listing can be rebuilt the next time the broker re-scrapes.

There’s no comprehensive federal law requiring brokers to honor opt-outs permanently. California’s CCPA and similar state laws give residents the right to request deletion, and a small number of states — including Vermont and Oregon — require brokers to register, which at least creates a list of who to contact. But there’s no single national mechanism, and enforcement varies widely.

Some brokers have made opt-out pages deliberately hard to find. A 2026 U.S. Senate investigation found that several major data brokers had placed code on their opt-out pages specifically to prevent search engines from indexing them — making the pages that exist to let you remove your data harder to discover in the first place.

The realistic expectation, based on how the industry currently operates, is that opting out once isn’t enough — most people who go through the process need to repeat it two to four times a year to stay removed.


A Practical Approach to Opting Out

Given the scale — 4,000+ brokers — going one by one isn’t realistic for most people. A more practical approach focuses on the sites that matter most.

Start with the highest-traffic people-search sites. A relatively small number of sites account for most of the traffic and most of the “your information here” search results. Community-maintained opt-out lists exist that walk through the process for each of the major ones, including direct links to opt-out forms.

Use your state’s rights if you have them. If you live in California, Vermont, Oregon, or another state with broker-specific legislation, you may have a more formal deletion request process — and in some cases, a state-maintained registry of brokers operating there, which is useful for knowing who to contact.

Set a recurring reminder, not a one-time task. Given the 60–180 day refresh cycle most brokers operate on, treating this as a quarterly check-in — rather than a single afternoon project — matches how the data actually behaves.

Be selective about what feeds the next cycle. Every public listing, loyalty signup, and data-sharing checkbox you encounter is a potential future input for a broker’s next refresh. You can’t avoid all public records, but reducing the number of places that knowingly collect and share your information slows down how quickly a removed profile gets rebuilt.


The Connection to How You Store Your Own Data

Data broker profiles are built from information that was technically available somewhere — which is exactly the pattern worth noticing in your own digital life. A photo on a public social profile, a document uploaded to a service with broad data-sharing terms, an address attached to an old account you forgot about: each of these is a small, individually unremarkable piece that can end up aggregated somewhere you didn’t choose.

The same logic that motivates removing your listing from a people-search site — that information about you shouldn’t be freely available to compile and resell — applies to where you keep the personal files, photos, and documents that are genuinely yours. If the goal is reducing how much of your personal life is sitting in systems designed to aggregate, analyze, and monetize it, your own photo library and document storage are part of that picture too.


Where daftei Fits

daftei can’t remove your listing from a data broker site — that requires going through each broker’s own process. What it can do is make sure the personal photos and documents you choose to store aren’t themselves becoming raw material for the next aggregation cycle.

Everything in daftei is encrypted in transit with TLS 1.3 and at rest with AES-256. Nothing is sold, nothing trains a third-party AI model, and nothing is shown to advertisers — which means the documents and photos you keep there aren’t part of the data-sharing pipelines that feed services like the ones you’re trying to opt out of elsewhere.


The Bigger Picture

The data broker industry exists because personal information, once it touches enough systems, becomes a commodity — searchable, sellable, and very hard to fully retract. Opting out of people-search sites is a reasonable and worthwhile step, even knowing it isn’t permanent.

But it’s also a useful prompt to look at the other side of the equation: the personal information and files that are still entirely within your control right now, and whether the places you’re keeping them are adding to the pile or keeping it contained.

Keep your personal files out of the data-sharing pipeline with daftei

Your memories deserve better than an ad platform.

Try daftei free →
← All posts