What Is a Data Broker? How Your Personal Information Becomes a Product
The Short Answer
A data broker is a company that collects personal information about individuals from various sources, aggregates it into detailed profiles, and sells or licenses that information to third parties. You are almost certainly in their databases, and you almost certainly did not knowingly agree to it.
The data brokerage industry generates between $290 billion and $333 billion globally. There are an estimated 4,000 to 5,000 data brokers operating worldwide, with over 750 registered in US state registries. This is one of the largest industries most people have never heard of.
How Data Brokers Collect Your Information
Data brokers do not typically hack into systems or steal data. They collect it through channels that are technically legal, even if most consumers would find the practices objectionable.
Public Records
Government databases are a primary source. Birth certificates, marriage and divorce records, property deeds, voter registrations, court filings, business licenses, and bankruptcy records are all publicly accessible in most jurisdictions. Brokers systematically scrape these databases and incorporate the information into their profiles.
Social Media and Online Activity
Anything you post publicly on social media can be collected. This includes your name, photos, location check-ins, employer, school history, relationship status, interests, and social connections. Even on platforms with privacy settings, certain information (like your profile name and photo) is often publicly accessible by default.
Beyond social media, brokers track your online behavior through cookies, browser fingerprinting, and advertising tracking pixels embedded in websites and apps. Your browsing history, search queries, and online purchases all contribute to your profile.
Purchase History and Financial Data
Retailers, loyalty programs, and payment processors sell transaction data to brokers. Your purchase history reveals your income level, health conditions (via pharmacy purchases), dietary preferences, hobbies, and lifestyle. Credit header data (the non-financial portion of your credit file) is also widely traded.
App Data and Location Tracking
Mobile apps frequently sell user data to brokers, including location data, usage patterns, and device information. Location data is particularly valuable because it reveals where you live, where you work, which doctors you visit, which places of worship you attend, and your daily routines.
Data Purchases and Partnerships
Brokers buy data from each other. A single piece of information you provide to one company can propagate across dozens of broker databases through data-sharing agreements and bulk purchases. This interconnected ecosystem is why your data reappears on broker sites even after you opt out.
What They Build: Your Data Profile
By combining these sources, a single data broker can assemble a profile that includes:
- Full name, aliases, and maiden names
- Current and past home addresses
- Phone numbers and email addresses
- Date of birth and age
- Family members and associates
- Employment history and estimated income
- Education history
- Property ownership and estimated home value
- Vehicle registrations
- Political party affiliation and voter registration
- Court records and criminal history
- Social media accounts
- Consumer interests and purchase categories
- Health-related inferences
- Financial risk scores
The depth of these profiles is often startling to people seeing their own data for the first time.
Who Buys Your Data
Advertisers and Marketers
The largest category of buyers. Advertisers purchase data to target you with personalized ads based on your demographics, interests, purchase history, and predicted behaviors. This is the engine behind the "how did they know I was looking at that?" experience.
Employers and Landlords
Background check companies are data brokers. When you apply for a job or an apartment, the screening company pulls data from multiple broker sources to compile a report. While regulated under the Fair Credit Reporting Act for certain purposes, the underlying data often comes from less regulated broker databases.
Insurance Companies
Insurers use data broker information to assess risk. Your lifestyle, health indicators, driving records, and even social media activity can influence insurance pricing and coverage decisions.
Financial Institutions
Banks and lenders use broker data for identity verification, fraud detection, and marketing. Pre-approved credit card offers are generated using purchased data profiles.
Law Enforcement
Government agencies purchase data from brokers as a way to access information that might otherwise require a warrant. This has become a significant civil liberties concern, as it effectively creates a workaround for Fourth Amendment protections.
Scammers and Bad Actors
This is where the real damage happens. People-search sites make it trivial for anyone to find your home address, phone number, and family members. On the dark web, stolen data trades at specific price points: Social Security numbers sell for $1 to $6, medical records for $250 to $310, credit card numbers for $10 to $40, and complete identity packages for $20 to $100 or more.
The 2025 record of 3,322 US data breaches, with an average cost of $10.22 million per breach, demonstrates the scale of the problem. Your data sitting in broker databases is not just a privacy issue. It is a security liability.
The Regulatory Landscape
Privacy regulation is catching up, but slowly. As of 2026, 20 US states have enacted comprehensive privacy laws that include some form of data broker regulation. Vermont and California were among the first to require data brokers to register with the state, creating the first public accounting of who these companies are.
The California Consumer Privacy Act (CCPA) and its successor, the CPRA, give California residents the right to know what data brokers have collected about them and to request deletion. Similar rights exist under the privacy laws in other states, though enforcement varies widely.
At the federal level, the US still lacks a comprehensive data privacy law. The American Data Privacy and Protection Act has been introduced in Congress multiple times but has not passed. This means your rights depend largely on which state you live in.
In the EU, the General Data Protection Regulation (GDPR) provides stronger protections, requiring explicit consent for data collection and giving individuals the right to erasure. However, enforcement against data brokers has been inconsistent.
What You Can Do About It
You have three basic options:
Do nothing. This is what most people do, either because they do not know about data brokers or because the opt-out process feels overwhelming. The cost is continued exposure.
Manual opt-out. You can submit removal requests to individual data brokers. This works, but it takes 40 to 80 hours for a thorough job across major brokers, and 30 to 40% of removed data reappears within 90 days. It requires ongoing maintenance.
Use an automated removal service. Services like Sirveil, Optery, DeleteMe, and Incogni automate the opt-out process across hundreds of brokers. They continuously monitor for reappearance and re-submit removals as needed. This is the practical choice for most people who want meaningful results without dedicating dozens of hours to the task.
The data broker industry is not going away. But understanding how it works is the first step toward limiting its impact on your life.
Published by the Sirveil Team. We build AI-native privacy tools to help people take back control of their personal data.