The phrase "data brokers sell your information" gets repeated constantly, but it's vague enough to be nearly meaningless. Sell what exactly? To whom? For what purpose? The specifics matter — both for understanding why the exposure is dangerous and for knowing where to focus your removal efforts.
This is a precise breakdown of the data broker ecosystem: what they collect, how they package it, who the buyers are, and what the downstream uses look like. Understanding this helps investigators prioritize where the actual risk lives.
The Raw Inputs: Where Brokers Get Your Data
Data brokers don't generate data — they aggregate it. Their business is collecting information from dozens of source categories and combining it into comprehensive profiles. The primary input sources are:
Public Records
Government-generated records are the backbone of most broker databases. Property tax records from county assessors. Court filings — civil and criminal. Voter registration rolls. DMV and vehicle registration data (where state law permits). Business and professional license filings. Marriage, divorce, and death records. Bankruptcy filings. Sex offender registries. These records are legally public, collected by government agencies, and freely accessible. Brokers automate the collection at scale.
Credit Header Data
The "header" of a credit file contains identifying information: name, address, date of birth, Social Security number, and employer. The Fair Credit Reporting Act restricts use of the full credit file to specific permissible purposes, but the header data has historically been sold under different regulatory frameworks. This is why data brokers often have accurate addresses even when someone hasn't updated their public records — the address comes from a credit inquiry or account update.
Commercial Transaction Data
Purchases, loyalty programs, warranty registrations, magazine subscriptions, online orders, and retail store sign-ups all generate data that feeds into broker profiles. When you register a new appliance with the manufacturer, that registration often gets resold. When you sign up for a store loyalty card, that transaction history becomes a data asset.
Social Media and Web Data
Publicly visible social media profiles are scraped and indexed. Profile photos, employer information, relationship status, location check-ins, and listed contact information all become inputs. Web scraping of directories, professional association sites, alumni databases, and any other publicly accessible source contributes to the profile.
Change of Address and USPS Data
The United States Postal Service sells National Change of Address (NCOA) data to licensed data providers. When you file a change-of-address form with the post office, that information flows to broker databases through licensed data licensees. This is one of the mechanisms by which broker profiles stay current.
Data Purchased from Other Brokers
Data brokers buy data from each other. This creates a layered ecosystem where information spreads across hundreds of companies through resale agreements. A single change of address filed with USPS can propagate through dozens of broker databases within weeks.
What a Typical Broker Profile Contains
A compiled broker profile on a U.S. adult typically includes some or all of the following:
- Full name — including maiden names, aliases, and name variations
- Current address — street address, city, state, zip
- Address history — often 10–20 years of previous addresses
- Phone numbers — current and historical, mobile and landline
- Email addresses — multiple, often including old addresses
- Date of birth — sometimes full DOB, sometimes year only
- Relatives and household members — by name, with relationship labels
- Neighbors — names and addresses of adjacent properties
- Employer name — current and historical
- Vehicle registrations — make, model, year, VIN in some states
- Property records — owned properties with assessed values
- Estimated income range
- Net worth estimate
- Education level
- Political party affiliation — in states with party registration
- Consumer interest categories — hunting, fitness, political interests, etc.
- Criminal records — arrests and convictions from court data
- Bankruptcy filings
- Liens and judgments
Premium broker data packages sold to commercial clients may also include Social Security number fragments, credit-related inferences, and detailed consumer behavior profiles. The consumer-facing sites that allow the public to look someone up for $19.99 show a subset of this data; the full commercial datasets sold to corporate clients are considerably more comprehensive.
The Buyers: Who Purchases This Data and Why
Data brokers have two fundamentally different customer categories: the general public (through consumer-facing lookup sites) and commercial clients (through licensed data feeds and APIs). The uses differ significantly.
Consumer-Facing Lookup Sites
Sites like Spokeo, BeenVerified, Whitepages, TruthFinder, and Intelius sell individual lookups to the general public for $5–$40 per report or $20–$30/month for subscription access. The stated use cases are reconnecting with lost contacts, researching dates, verifying landlord/tenant information, and background checks. The actual user population is mixed — it includes all of those legitimate uses plus people checking up on ex-partners, subjects trying to identify who found them, and general curiosity searches.
Debt Collection and Recovery Industries
Skip tracing for debt recovery is a major commercial use of broker data. Collection agencies, debt buyers, and their skip tracing vendors purchase batch data feeds to locate debtors. This is one of the permissible uses under the Fair Credit Reporting Act for data that touches on consumer credit. The same databases being used to find debtors also contain detailed profiles on the investigators doing the searching.
Insurance Underwriting
Insurance companies use data broker information to verify application details, assess risk, and detect fraud. Vehicle ownership, address history, and certain public record data all feed into underwriting decisions.
Background Screening Companies
Employment background checks draw on broker data to verify identity, check criminal records, and confirm address history. This is a regulated use under the FCRA, but the underlying data comes from the same broker ecosystem.
Marketing and Advertising
The largest commercial use of broker data by volume is targeted advertising. Brands purchase audience segments — "homeowners over 45 in the Midwest who own a truck and have household income over $75,000" — built from broker profile data. This data feeds into programmatic advertising platforms and direct mail campaigns. You are a product being sold to marketers at a per-thousand-record rate.
Law Enforcement and Government
Federal, state, and local law enforcement agencies purchase access to broker databases. The legal framework for government access to commercial data is contested — it allows agencies to acquire data through commercial purchase that they couldn't directly access through subpoena or warrant without Fourth Amendment scrutiny. This is an active area of legal and policy dispute.
Private Investigators and Skip Tracers
Private investigators and skip tracing firms purchase licensed access to commercial-grade data feeds that are more comprehensive than consumer-facing sites. Companies like TLO (TransUnion), IRB Search, Accurint (LexisNexis), and IDI/Forewarn sell professional-grade data access with more complete records and additional identifiers. These professional databases are more strictly access-controlled, but they contain the same underlying data.
Stalkers, Harassers, and Bad Actors
The same consumer-facing lookup sites used for legitimate research are used by people with malicious intent. Domestic abusers locate victims. Stalkers build profiles on targets. People with grievances identify addresses for harassment. The data broker industry acknowledges this problem and has implemented some safeguards (like allowing survivors of domestic violence to suppress their records), but the fundamental architecture of "anyone can pay to look up anyone" creates inherent risk.
What This Means for Investigators
Your profile exists in both the consumer-facing and commercial-grade broker systems. A subject or their associate can access your home address, phone number, and household members through any consumer-facing site for under $30. A more sophisticated actor — like an attorney running a background on the investigator who located their client — can access more complete data through professional channels.
The practical implications:
The data broker opt-out processes on consumer-facing sites matter because that's the most accessible attack surface. Getting yourself off Spokeo, Whitepages, and BeenVerified removes the easiest path for an unsophisticated subject to find your home address.
The structural protections — registered agent for business filings, PO box or mail forwarding service as your mailing address, keeping your home address off any public-facing profile — matter for the commercial-grade data that's harder to opt out of.
Understanding that opt-outs are not permanent is essential. The data broker ecosystem continuously re-ingests data from its source feeds. An opt-out that works today will be reversed within 6–18 months in most cases as new data batches are processed. This is why ongoing removal services rather than one-time opt-outs are the effective long-term strategy.
For a practical starting point, use the Boolean self-search tool to audit what's currently indexed under your name, and review the removal services comparison to find the right approach for your situation.
See what's out there on you right now
A Boolean self-search takes five minutes and shows you exactly what a motivated subject would find.
Run a self-search →