Your Personal Data Is for Sale: How the Market Works

The idea that personal data is for sale can sound like a slogan. It is more literal than most people realize. There are companies whose business is collecting information about individuals, assembling it into profiles and licensing it to buyers. Other companies earn money by selling targeted access to people based on those profiles. This guide explains how the market works, who participates, what is for sale, where legal lines exist and how to reduce what is sold about you. For a deeper dive, see our articles on data brokers selling your personal information and how much money brokers make.

1. The players in the market

Data brokers

Brokers collect data from many sources and sell or license it. Some serve marketers. Some serve risk analysis. Some operate public-facing people-search websites.

Platforms and apps

Websites, apps and social networks collect user data and may share it with partners or use it for advertising.

Retailers and loyalty programs

Purchase histories and loyalty data may be shared, aggregated or sold under their policies.

Credit bureaus

Credit reporting agencies sell reports and prescreened lists under legal rules. See our article on stopping reporting agencies from selling and sharing data.

Advertising networks

Ad tech companies match identifiers and audiences in real time.

Buyers

Marketers, insurers, lenders, employers, landlords, political campaigns, investigators and fraudsters.

2. What is for sale

Data type	Examples
Identity and contact	Name, address history, phone, email, age
Household	Relatives, household size, homeownership
Financial indicators	Estimated income, purchase behavior, credit-related marketing segments
Interests	Hobbies, shopping categories, life events
Location	Visits and movement patterns from apps and devices
Online behavior	Browsing, searches, app usage
Public records	Property, court, voter and licenses
Inferred traits	Predicted attributes from patterns

For how inferences work, read how attribute inference attacks expose your privacy.

Curious what’s already out there? Wiperts’ 100% Free Diagnosis shows which data brokers are listing your name, home address and phone number. Check your exposure free — it takes about a minute.

3. How data moves from you to a buyer

You leave traces by browsing, shopping, registering or appearing in a record.
Collectors gather them, often through trackers and forms.
Brokers match records using identifiers and enrich profiles with public data.
Profiles are segmented into lists such as new homeowners or likely car buyers.
Buyers license access or buy lists.
Data is copied onward, sometimes beyond the buyer’s original purpose.

Each step is legal in many circumstances. The result is that a profile can end up with parties you never encountered.

4. Is it legal

The answer depends on the data and place. There is no single comprehensive federal law. Sector-specific laws cover credit reports, health information held by covered entities and children’s data. State laws are expanding. California, for example, requires data broker registration and provides deletion tools through the California Privacy Protection Agency. The Federal Trade Commission polices unfair or deceptive practices; learn more at ftc.gov and consumer.ftc.gov. Our article on why we cannot stop data brokers explains why sales continue.

5. Real consequences

Scams. Accurate details make fraud believable. The FTC received about 3 million fraud reports in 2025, with roughly $15.9 billion in reported losses (ftc.gov).
Harassment and safety risks. Address and relative listings help people locate others.
Unwanted marketing. Calls, texts and mail increase when lists are sold.
Differential treatment. Profiles can influence offers and pricing.
Breach exposure. Large databases attract thieves.

6. How to opt out of the sale of your data

Look for these links on websites and apps you use. Turn on opt-out preference signals in your browser if available.

Use your state privacy rights

Where state law applies, you can request access, deletion and opt-outs from covered businesses. The CPPA explains rights for California residents.

Use DROP if you live in California

DROP lets you send one deletion request to registered brokers at privacy.ca.gov/drop. It opened January 1, 2026; registered brokers began processing on August 1, 2026 and repeat every 45 days.

Opt out of people-search sites

Official pages include Spokeo, the PeopleConnect suppression center and That’s Them. See our complete guide to deleting your data from the internet.

Stop prescreened credit offers

Call 1-888-5-OPT-OUT.

Use aliases, decline optional fields and limit app permissions.

Freeze credit

Block new-account fraud with the FTC’s freeze guidance.

7. Realistic expectations

Opt-outs reduce sales but do not end them. Records can be recollected from public sources, and some data is outside the scope of opt-out laws. The right goal is meaningful reduction and fast cleanup. Revisit your settings and listings regularly, and treat privacy as maintenance rather than a one-time event.

8. Timeline: shrinking the sale of your data

When	Action
Day 1	Turn on opt-out signals, review ad settings
Week 1	Opt out of people-search sites, start DROP if eligible
Week 2	Submit rights requests to major services
Month 1	Verify removals, freeze credit
Every 45 days	Recheck as brokers refresh
Quarterly	Repeat the review

9. A closer look at the broker business model

Brokers make money by turning scattered information into products. A marketing broker may sell a list of people in a certain age range, in a certain ZIP code, who own their homes and have recently searched for home improvement. A risk-data broker may sell scores used for fraud prevention. A people-search broker may earn from advertising and subscriptions by letting visitors look up individuals. Each product depends on the same raw material: records about real people. Because the cost of copying data is low, once a record exists it can be sold many times.

The asymmetry is the core problem. Brokers know a great deal about you, and you often do not know they exist. Most do not have a direct relationship with the people they describe, which is why opt-outs and deletion requests are needed. Registration laws, such as California’s, make the industry more visible, and the California Privacy Protection Agency publishes a registry that residents can use to see who is collecting data.

10. What a typical profile can contain

A broker profile may include your full name and nicknames, current and former addresses, phone numbers, email addresses, age or birth year, relatives and associates, homeownership and property value, employment and education indicators, estimated household income range, vehicle information, interests inferred from purchases and online behavior, and life events such as moving or having a child. Not every profile has all of these, and accuracy varies. Errors matter because decisions may be based on them. If you find a wrong profile, ask for correction or deletion.

Many sales begin with consent that you gave without noticing, such as a checkbox on a contest or a sentence in a warranty registration. Before sharing details, look for statements about sharing with “partners” or “affiliates”, and decline when you can. Use a separate email address for sweepstakes and coupons. Ask stores not to record your phone number. The less you hand over at the start, the less there is to sell later.

12. What to do if your data is already out there

If your data has already been sold, do not give up. Take the steps above to opt out, and combine them with defensive measures that make misuse harder: a credit freeze, unique passwords, two-factor authentication and caution with unsolicited contacts. If a profile has led to scams or harassment, document what happened and report it at ReportFraud.ftc.gov. Over time, your visible footprint can shrink significantly, even though you cannot erase the past entirely. Our guide on the data brokers selling your personal information describes the main players you may want to target first.

13. Three scenarios and what to do

Scenario 1: A site shows a Do Not Sell or Share link. Use it, and keep a record.

Scenario 2: Your profile appears on a people-search site. Opt out and check related listings.

Scenario 3: A store asks for your phone number. Decline or give a secondary number.

14. Myths and facts

Myth	Fact
Selling data is illegal	Often lawful within limits
Only shady sites sell data	Many mainstream firms share it
Opt-outs are permanent	Records can return
I cannot do anything	Layered steps work
Anonymous data cannot be tied to me	It can often be re-identified

15. Common mistakes

Ignoring Do Not Sell links.
Using real numbers for coupons.
Opting out once and stopping.
Overlooking public listings.
Believing marketing promises of anonymity.

16. Questions to ask yourself

Which companies hold the most about me? Which of my details are on public sites? Have I used my state rights? Where do I give out my real phone number unnecessarily? Start with the answers that bother you.

17. How Wiperts fits

Wiperts automates the hardest part of opting out. It scans more than 100 data brokers and people-search sites, submits removal requests, removes personal results from Google and Bing, blurs your home on maps and monitors for returning profiles. Start with the free diagnosis.

100% Free Diagnosis: Check Your Exposure

Find out what data brokers have on you. Enter your details in the free scanner on the Wiperts homepage:

First Name
Last Name
Select State
Email Address
Website

Scan Databases Now — no payment is needed to see your exposure report.

18. Key takeaways

Personal data is bought and sold by brokers, platforms and others.
Laws vary; use Do Not Sell links, state rights and DROP.
Opt out of people-search sites and share less.
Recheck regularly because listings return.

Pick the Wiperts plan that fits your household

Plan	Covers	One-time deep scrub	Then
Individual	1 person	$89	$14/month
Couples (most popular)	2 people	$149	$24/month
Family	Up to 4 people	$199	$39/month

Every plan includes removal of your name, date of birth, salary, home address and phone number from 100+ data brokers and people-search sites, Google and Bing search-result removal, home blurring on maps, and 24/7 monitoring that re-removes your data if it reappears. See plans and start your removal

19. Frequently Asked Questions

Is my personal data really sold?

Yes. Data brokers and other companies license or sell personal information to marketers, risk analysts, people-search sites and others.

Who buys personal data?

Advertisers, retailers, insurers, lenders, employers, landlords, political campaigns, researchers and, through leaks and listings, scammers.

Can I stop my data from being sold?

You can reduce it. Use opt-out links and state privacy rights, submit broker opt-outs, use DROP in California and share less.

It is a link or setting, required by some state laws, that lets you tell a business not to sell or share your personal information for certain purposes.

Do opt-outs work permanently?

Not always. Brokers refresh from public records and other sources, so repeat checks are needed.

Is selling data legal?

In many cases, yes, within limits set by federal and state laws, which vary by data type and location.

Sources

Ready to erase your footprint?

Stop letting data brokers profit from your personal life. Start your removal today.

Start Removing