Who Owns Your Data Removal Service? Why It Matters

The short version: data removal services ask for exactly the information they promise to protect — your name, addresses, birth date, phone numbers, and emails. That makes who owns and operates them a security question, not a curiosity. The industry's cautionary tale is documented: in March 2024, investigative reporter Brian Krebs revealed that the founder of Onerep, the removal service Mozilla had just bundled with Firefox, had also founded dozens of people-search services and acknowledged still holding a stake in one — and Mozilla dropped the partnership within days. Below: what happened, what it teaches, and the questions to ask any provider (including us).

The Onerep / Mozilla story, as documented

This account is drawn from Krebs on Security's published investigation and Mozilla's own public statements; nothing here goes beyond what was reported and acknowledged.

In February 2024, Mozilla began bundling Onerep — a subscription service that removes users from hundreds of people-search sites — into Mozilla Monitor Plus, the paid tier of its breach-alert product.

On March 14, 2024, Krebs on Security published an investigation showing that Onerep's founder and CEO, Dimitri Shelest, had launched dozens of people-search services since 2010 — including Nuwber, a still-active data broker that sells background reports, founded around the same time as Onerep itself. In a statement following the report, Shelest acknowledged maintaining an ownership stake in Nuwber.

Within days, Mozilla announced it was winding down the partnership, saying that while "customer data was never at risk, the outside financial interests and activities of Onerep's CEO do not align with our values."

The epilogue matters too: finding a replacement proved hard. Mozilla was still using Onerep as the backend nearly a year later while it searched for "a technically excellent and values-aligned partner," and ultimately shut down Monitor Plus entirely on December 17, 2025, refunding subscribers pro-rata.

To be clear about what this does and doesn't establish: there was no finding that Onerep mishandled customer data. The issue Mozilla itself named was a conflict of interest — a removal service whose founder also had a financial stake in the people-search industry his product charges customers to fight.

Why ownership is a real security question here

Think about what you give a removal service: your full name, every address you've lived at, your date of birth, phone numbers, email addresses — often more complete and better-verified than what any data broker holds. You hand it over precisely so the service can find and delete matching records.

That creates three structural risks worth thinking about with any provider:

1. Conflicts of interest. If a provider (or its owners) also profits from people-search or data brokerage, the incentive to make removal genuinely effective is compromised. The removal subscription and the broker listing can become two sides of one business model.
2. Data handling. Your enriched profile is valuable. Who processes it, where, and under what jurisdiction and safeguards?
3. Ownership changes. The company you signed up with may not be the company holding your data next year — and the successor's privacy policy applies.

Ownership changes are normal — but check the terms

Not every ownership fact is a scandal; most are just things you should know:

• Permission Slip, the free data-rights app Consumer Reports launched in 2022, was transferred to DeleteMe in 2026, which is assuming full operations. DeleteMe is a legitimate operator — but the app's original appeal was its nonprofit consumer-advocate steward, and DeleteMe's privacy policy and terms now apply. Users deserve to know that and re-read the terms.
• Incogni is built by Surfshark, the VPN company (part of the Nord Security family). Nothing hidden — it's on their site — and it explains Incogni's strengths (large-scale automation) and gaps (it's one product in a large portfolio).
• DeleteMe is owned by Abine and has operated since roughly 2010 — long, public, unremarkable ownership, which is exactly what you want to see.
• Kanary is independently owned (Kanaries Inc., founded 2020) and publishes its story, funding, and SOC 2 status openly — another good pattern.

The lesson isn't "ownership changes are bad." It's that in this industry, you should always be able to answer: who ultimately profits from my data being protected — and do they also profit from data being exposed?

Five questions to ask any removal service

1. Who owns the company, and do the owners have any past or present ties to people-search sites, data brokers, or ad-tech data businesses? (The Onerep case is why this is question one.)
2. What exactly do they do with the profile you give them? Look for an explicit statement that your data is used only to perform removals, never sold or shared.
3. Can you verify their work? Do you get evidence — source links, screenshots, per-request status — or just a dashboard number?
4. What happens if they're acquired or shut down? Mozilla's Monitor Plus shutdown deleted all customer removal data; Permission Slip's transfer changed which company's policy applies. Read the change-of-control language.
5. Are their claims honest? No service can guarantee full removal — brokers re-list, new brokers appear, and public records can't always be deleted at the source. A provider that admits this is telling you the truth; one that promises "complete erasure" is not. (Here's our own explainer on why guarantees are impossible.)

Where Sirveil stands

Since we're asking the questions, we should answer them.

• Ownership: Sirveil, Inc. is independent. No founder, officer, or owner has any stake in a people-search site, data broker, or data-sales business of any kind. Our only revenue is subscriptions and the optional FOIA add-on — we make money when your data comes down, not when it's up.
• Your data: used solely to find and remove your records and to show you the evidence. We don't sell it, share it, or run any other business with it.
• Verifiability: every scan finding includes its source link and a match-confidence score; every removal request is tracked in the app; requests cite the specific state privacy law that applies.
• Honesty about limits: we publish why removal services (ours included) can't guarantee results, and our comparison pages credit competitors where they beat us — including free options and the $19.99/yr budget pick.

Frequently asked questions

Was Onerep found to have misused customer data? No such finding was reported. The documented issue was a conflict of interest: Krebs on Security showed Onerep's founder had also founded dozens of people-search services and acknowledged retaining a stake in Nuwber, an active data broker. Mozilla ended the partnership over that misalignment, stating customer data was never at risk.

Is it safe to give a removal service my personal information? It can be — the model requires it — but treat it like choosing a bank. Check ownership, read the privacy policy's data-use and change-of-control terms, and prefer providers who show verifiable evidence of their work.

Who owns the big data removal services? As of July 2026: DeleteMe is owned by Abine (and now also operates Permission Slip, acquired from Consumer Reports); Incogni is built by Surfshark within the Nord Security family; Optery, Kanary, EasyOptOuts, and Sirveil are independent companies; Aura is an independent security-suite company. Ownership can change — re-check before subscribing.

What happened to Mozilla Monitor Plus? Mozilla shut it down on December 17, 2025, after failing to find a replacement backend for Onerep. Subscribers received prorated refunds, and Mozilla deleted all Monitor Plus scan and removal data. The free breach-monitoring side of Mozilla Monitor continues.

The takeaway

Data removal runs on trust, and trust runs on ownership transparency. Before you hand anyone the most complete profile of yourself that exists, make them answer who they are and how they make money. Any provider worth paying will answer gladly.

Sirveil is independent, evidence-first, and honest about limits — $7.99/month or $79.99/year, on Google Play now, iOS coming soon.

Related guides: Best free & paid data removal services (2026) · Best DeleteMe alternatives (2026) · Why removal services can't guarantee results · What is a data broker?

---

Published by the Sirveil Team. All claims about the Onerep/Mozilla events are sourced from Krebs on Security's published reporting and Mozilla's public statements, linked above; other ownership facts verified from company materials, July 2026.