How to Remove Your Personal Data From Data Broker Sites

There are companies whose entire business model is knowing where you live. People-search sites and data brokers aggregate your home address, phone number, age, relatives, and property records from public databases, then publish them to anyone with a browser — and republish them every time you ask them to stop. Getting your personal information off the internet is not one form. It is a campaign. Here is how I run it.

First, understand the enemy. Your data sits in three layers. People-search sites (Spokeo, Whitepages, BeenVerified, TruePeopleSearch, FastPeopleSearch) republish public records. Data brokers (Acxiom, Experian Marketing, Epsilon, Oracle Data Cloud) sell the same profile in bulk to marketers. Breach dumps leak whatever you typed into services that later got compromised. Each layer has a different removal path, and none of them are permanent on the first try.

Step 1: Find every profile that exposes you

Search your own name the way an attacker would: quoted full name, plus your city, plus old cities. Then search your phone number, your email, and — this is the one people forget — your name plus a family member's name, because brokers link households. Write every URL down. You cannot opt out of a profile you never found, and brokers deliberately make profiles hard to surface for the person they describe.

Step 2: Submit the opt-outs, one by one

Every major broker runs a suppression or opt-out page. It is tedious by design. The highest-traffic ones, in the order I usually work them:

• Whitepages — find your listing, copy the profile URL, submit the opt-out form, confirm by phone. This is the one that exposes home addresses most reliably.
• Spokeo — email their privacy team or use the online opt-out with the profile URL.
• BeenVerified, TruthFinder, Instant Checkmate — same family of sites; each has its own form, each requires the exact profile URL.
• TruePeopleSearch / FastPeopleSearch — no account required, opt-out is a simple form, but listings reappear. Expect to repeat quarterly.
• MyLife, Radaris, Intelius, PeopleFinders — the long tail. Use the same URL-plus-form pattern.

Budget an afternoon. Screenshot every confirmation — brokers have been known to "lose" requests, and a dated screenshot turns a repeat request into a demand.

Step 3: Decide whether to automate or DIY

Services like DeleteMe, Incogni, Optery, and Kanary run this loop for you on a subscription. They cover the major brokers, re-scan on a schedule, and send you a removal report. What they will not do is remove you from the small feeder sites that repopulate the big ones, and none of them touch breach data. My honest read: if your threat model includes a stalker, a custody dispute, or a public-facing role, pay for a service and audit it. If it does not, the manual sweep plus a quarterly calendar reminder gets you 80% of the value for zero dollars.

Data brokers are not a privacy accident. They are a privacy business. Act like the customer they never asked for.

Step 4: Remove personal information from Google itself

Google will remove search results that contain your personal information under its Results About You policy: your address, phone, email, government ID, medical records, or login credentials. Use the Results About You tool in your Google account, or the standard removal request form. What it does not do is delete the underlying page — Google delists, the broker still hosts. That is why this step comes after the opt-outs: kill the source first, then clear the search index.

Step 5: Freeze your credit at all three bureaus

This is not a broker fix, but it is the single control that converts a leaked identity into a useless one. A credit freeze at Equifax, TransUnion, and Experian is free, takes about 20 minutes, and stops new accounts being opened in your name. Unlike a fraud alert, it does not expire. Unfreeze temporarily when you actually need credit.

What you cannot remove — and how to live with it

Breach dumps, court records, mortgage deeds, and past news coverage are effectively permanent. The play there is dilution and monitoring: unique email aliases per service so the next breach tags the right culprit, a breach watch on your main address, and a periodic re-scan. Brokers repopulate from public records on a 3–6 month cycle, so a one-time purge is a weekend project; staying clean is a habit.

Start by finding out exactly how exposed you already are — an exposure scan shows which of your emails, usernames, and domains are sitting in breach databases right now.