Data brokers sell your email address without ever asking you, and opting out only prunes the listing while the trade keeps running. I run AliasFleet, an email alias service that gives each site its own forwarding address, so a sold address names its source and can be switched off alone.
Your address is on sale somewhere you never signed up
Type your name into a people-search site and you will likely find a listing carrying old addresses, old phone numbers and relatives you never entered there. You never created an account on that site. It assembled the listing from other people's records and put a price on the rest.
A data broker is a company that collects personal information about people it has no direct relationship with, then sells or licences that information to third parties. A shop knows you because you bought something there. A broker knows you because it bought your record. The Privacy Rights Clearinghouse describes brokers as compiling data from public records, social media, purchase histories, loyalty programmes, app usage, location tracking and other brokers, into detailed profiles on hundreds of millions of Americans. Its researchers built a unified database of more than 750 brokers from five state registries in 2025 and found hundreds registered in one state but not others.
People-search sites are the visible end of this trade: part of the file free, the remainder for sale. Each site runs its own removal process. Whitepages asks you to paste your profile URL to begin a five-step opt-out.
How your address lands in the file
The address enters the file through ordinary life, and nobody asks because the business model does not need to ask.
Public records come first. Voter registration, property records and court records are open to anyone who collects them at scale. Collecting them at scale is lawful in many places, and your email address rides along with the rest of the record.
Commercial sources come second. The FTC's 2014 study of nine data brokers found them collecting purchase data, social media activity, warranty registrations, magazine subscriptions and religious and political affiliations. One broker in the study held more than 1.4 billion consumer transactions and 700 billion data elements. Another added more than 3 billion new data points a month. A warranty card is not a consent form for resale. The data moves anyway. Loyalty cards work the same way.
Third comes resale. Brokers sell to each other, which is what makes the trade so hard to unwind. In the FTC study, seven of the nine brokers had passed information to another broker in the same study. It moves from file to file, picking up fresh data at each stop.
Last comes what you do online and in apps. UC Irvine researchers found brokers harvesting from public records, online activities, social media and competitors.
One claim this piece does not make: the same address turns up in breach lists and broker files, but that does not prove one feeds the other. The verified mechanism is the legal trade above, not a pipeline from leaked dumps.
What buyers actually pay for
Buyers pay for a profile with the address attached, not a bare address.
Marketing is the biggest buyer category. Brokers sell audience segments built on shopping habits, interests and inferred traits. The FTC study found brokers drawing inferences about pregnancy, diabetes and high cholesterol, and selling segments with names like Urban Scramble, Mobile Mixers and Rural Everlasting. The inference is what sells: an address tied to a predicted health condition or income band becomes a targeting slot.
People search is the second category: individuals looking up other individuals, landlord, employer or stranger. The listing is the product.
Third is risk mitigation and fraud prevention, meaning identity checks and risk scores that decide whether a transaction clears. A wrong record here can mean a blocked transaction.
The buyer list is wide. Data brokers sell to employers, landlords, insurance companies and government agencies, among others, according to reporting on the UC Irvine research. Stanford researchers also found California's 2026 broker registry now compels disclosure of sales to generative AI developers. More than 30 companies have disclosed them. It feeds hiring, housing, pricing and model training, with no say from you.
Why opting out only prunes the listing
Opting out helps. It just helps less than the word opt-out promises.
Consumer Reports tracked 32 volunteers across 13 people-search sites for four months. Manual opt-outs cleared 70% of profiles within a week; paid services managed 0% to 58.7%. After four months the best services reached 65% to 68%, the worst 4% to 6%, and every participant still appeared on some of the 13 sites at every check. That is as good as it gets: better than nothing, never complete.
The process itself is the first wall. A second Consumer Reports study acted as authorised agent for 124 Californians across 21 companies, including Equifax, LiveRamp and Oracle, and hit some barrier at almost all of them. Some gave vague instructions, some claimed the rules did not cover them, a few never answered at all, and five companies refused outright. Acxiom's requests went in by mail in the end. That was a study run by experts. Alone, you face the same maze with less help.
Verification turns the problem inside out. Proving you are the person in the file means handing over the very data you want removed. LiveRamp offers opt-outs to everyone in the US, but a comprehensive opt-out needs your first and last name plus email, and an access request needs photo ID, proof of residency and a selfie. You give a broker fresh identity documents in exchange for suppressing an old record. UC Irvine researchers flagged the same paradox: some brokers asked for full name, address or Social Security number first.
To prove you are the person in the file, some brokers ask for fresh identity documents before they will suppress the old record. California law disallows verification on an opt-out, yet around 22% of brokers in the fall 2025 follow-up asked for it anyway.
Even a filed request can vanish into silence. A fall 2025 follow-up sent 322 deletion requests and close to 360 opt-out requests to brokers on California's registry, all under invented identities. Around 70% of the deletion requests never got a reported result, close to one in four opt-outs got some acknowledgment, and around 22% of brokers asked for identity verification on an opt-out, which California law disallows. Three brokers began sending marketing email to the invented addresses once they had received requests. One reply came with real people's records attached. The authors state plainly that with invented identities, the study measures process rather than actual deletion. But the process is the part you have to live with.
And nothing you clear stays cleared. An opt-out at one broker cannot touch copies already sold. Those live under the buyers' own retention. It cannot stop the broker buying the same address again from the next source. The FTC found some brokers storing data indefinitely.
Opt-outs are not useless. Clearing 70% of listings in a week is real progress on the visible ones. But pruning is all it is. The fix later in this piece does not chase the file. It kills the address.
California built the first real exit
For years the answer was "one by one, forever." California changed that.
The Delete Act set up the Delete Request and Opt-out Platform, known as DROP. A single request from a California resident reaches every registered broker. Since August 1, 2026, brokers must look in DROP at least every 45 days, erase all associated personal data including inferences unless an exemption applies, and report back on each request within 45 days. The California Privacy Protection Agency calls it a first-of-its-kind tool. The governor's office put usage past 155,000 Californians by the January 2026 launch announcement.
DROP has limits. It serves California residents and registered brokers only. Data governed by other laws, such as health data under HIPAA, plus first-party data held by services you use directly, fall outside it. Exemptions exist. And the compliance record is weak: the same Stanford review found only 9% of 522 self-registered brokers fully complied with the Delete Act's transparency requirements, 45% submitted no metrics at all, and 64% added friction the law prohibits. DROP is the best process fix available. It does not prove the file is gone. Nobody has yet published verified data on how many DROP requests produced confirmed deletion rather than submission.
Before California, registration was the whole model. Vermont's 2018 law, the first of its kind, required brokers to register and disclose opt-out practices without requiring them to offer an opt-out. The Vermont law only mapped the trade. DROP is the first genuine exit, and it covers a single state.
Outside California, you are back to the manual route: Acxiom runs a dedicated opt-out form, Epsilon sends people through its privacy hub, and every other broker has its own version. A different form and a different queue every time, hundreds of times over. Outside the US, your local law may offer its own request route. The alias section below applies everywhere.
The address they sell can be made worthless
If the listing cannot be fully killed, the address in it can be made worthless.
Hand each site its own forwarding address, never your real one. Once that address is sold on, every message on it gives away its source. Pause or delete the alias and the channel dies, leaving your real inbox clean. The address they sell stops working as a route to you. It becomes a label on a leak. These are persistent, managed addresses under your control, not inboxes you abandon after ten minutes. The free tier covers 10 active aliases.
It works because it strikes at the one property the trade needs. The address has to reach you. A listing that points at a dead alias leaves the buyer nowhere to go.
An alias cannot claw back an address you already handed out. The real address you have used for a decade sits in hundreds of files. No alias setup repairs that. It only stops the list growing. An alias does not remove your name, phone number or postal address from broker files. It does not encrypt your mail. It does not survive your own reply either. Answer from your normal inbox and you hand over the real address yourself.
If your address has already turned up in a breach, check Have I Been Pwned for the incidents that include it. The alias strategy is forward-looking. It protects the next signup, and does nothing for the last ten years.
Start there. One alias on the next form that asks for your email. The setup takes about two minutes. The broker trade runs on addresses that never expire. Give it one that can.
Top comments (0)