Who sees your data

Someone is selling a file on you right now.

Data brokers assemble a dossier on almost everyone — stitched from public records, purchases, and the apps on your phone — and sell it to whoever pays. Advertisers, employers, debt collectors, stalkers, and government agencies are all on the buyer list. This page explains the machine and how you claw your data back out of it.

The mechanism

How the broker economy works

Nobody signs up to be profiled. The data arrives anyway — from places you did business, forms you filled out, and code running silently inside apps you installed for something else.

The industry runs in three moves: collect from many sources, aggregate those scraps into a single profile keyed to your name and address, and sell access to that profile on the open market. The same record can be resold hundreds of times, and brokers buy from each other, so a single data point spreads far past wherever it started.

In progressA diagram of the broker pipeline: where the data comes from, how it gets assembled into a profile, and who buys it.
You are not the broker’s customer — you’re the inventory. The people paying are everyone who wants to know things about you that you never agreed to tell them.
In progressStill being written: the specific public records, rewards programs, and app SDKs that feed brokers, each traced to a source.

Why we cover this

The broker loophole is a warrant the government never has to ask for.

This page is the companion to the third-party doctrine. That page explains why data you hand a company loses Fourth Amendment protection; brokers are what happens next. Because the records are for sale, an agency that would need a warrant to demand your data can often just buy it instead — and the same market is open to a landlord, an abuser, or anyone with a grudge and a credit card.

In progressStill being written: the documented harms — government purchases of broker data, stalking and doxxing, and decisions about price and eligibility.

The lever that already exists

One request, every broker: California’s DELETE Act

The usual advice is to opt out of hundreds of brokers one form at a time. One state built a shortcut — a single request that every registered broker has to honor — and it’s the clearest “close the loophole” win on the board.

The idea: instead of chasing brokers individually, you file once through a state-run platform, and every data broker registered in that state must delete what they hold on you and stop selling it. It ties directly into our Privacy by State map — a handful of states run broker registries at all, and most run none.

In progressStill being written: California’s DELETE Act and its deletion portal, from primary sources.

State broker registries

Where a broker registry exists at all, you at least have a list to work from. Confirm each before publishing.

California · state broker registry · VERIFY

California

[Research: confirm the registry, the administering agency, and the DELETE Act deletion mechanism. Link the official registry page.]

Vermont · state broker registry · VERIFY

Vermont

[Research: confirm Vermont’s data-broker registration law and link the state registry.]

Texas · state broker registry · VERIFY

Texas

[Research: confirm Texas’s broker registration requirement and link the registry.]

Oregon · state broker registry · VERIFY

Oregon

[Research: confirm Oregon’s broker registration law and link the registry.]

Add or drop states as the research turns up. Do not assert a state has a registry until the official page is located and linked.

Getting out

Two ways to claw your data back

You can do the removals yourself, or pay someone to do them on repeat. We lean hard toward the first — and we’re candid about the trade-offs of the second.

Do it yourself

Free, and you keep the receipts

The bottleneck was never difficulty — it was knowing which brokers exist and where each opt-out lives. Community-maintained directories solve exactly that: a running list of brokers with a direct link to each removal form.

In progressStill being written: the free opt-out route, and which directories are actually being maintained.
Pay a service

Read the fine print first

Removal services promise to do the opt-outs for you, forever, for a subscription. The structural problem: broker profiles regenerate, so you’re renting a fix to a problem that keeps coming back — and some of these companies sit uncomfortably close to the data business they claim to fight.

In progressStill being written: what paid removal services do and don’t deliver.

A warning that generalizes

When the tool protecting you gets bought

A privacy product is only as durable as its ownership. The guarantees you signed up for can change hands overnight — and a removal service holds a detailed list of exactly the data you most wanted gone.

In progressStill being written: what happens to your data when a privacy tool gets acquired.

Get involved

It’s free, open to everyone at Pitt, and joining takes about a minute.

No dues, no experience needed. Come to a meeting, or leave your name and we’ll tell you when the next one is.