← all articles

How to opt out of data broker listings yourself

I searched my own name on Spokeo back in March and found my home address, my mobile number, and the make of my car sitting on a public profile I never created. None of that came from Spokeo directly. It came from a mortgage application, a magazine subscription, and a data breach I can’t even name anymore, all of it scraped, merged, and repackaged for anyone willing to click through a $20 background report.

This is for anyone who wants their name off the big people-search sites and isn’t ready to pay $80 to $200 a year for a service like DeleteMe, Incogni, or Optery to handle it for them. Doing it yourself costs time, not money. Expect 3 to 6 hours for the first pass across roughly 20 sites, then a lighter recurring check every few months, because brokers relist you.

The realistic outcome is most of your listings gone from the top 15 to 20 broker sites within 4 to 6 weeks. Not all of them, and not forever. The underlying source data, voter files, property records, court filings, keeps getting rescraped. This becomes a chore you repeat, not a task you finish.

what you need

  • a dedicated email address for verification links, a free Gmail or Proton account works, just don’t reuse your main inbox
  • a US phone number for the brokers that insist on SMS or a call. I lean toward a real prepaid SIM over a VOIP number now, since some brokers flag Google Voice prefixes and quietly reject the request. cloudf.one’s blog has some cheaper phone number options if you need one
  • a spreadsheet or an Airtable base to track every submission and its follow up date
  • a separate browser profile or a private window, so autofill doesn’t leak your real session into a form you’re trying to submit anonymously. our /blog/private-browsers-compared-2026 rundown covers which ones actually isolate that
  • 3 to 6 hours for the first pass, most of it is copy-pasting your name and address into forms
  • no real budget required, though a password manager helps if a few sites force you to create a throwaway account

step by step

1. search yourself first

Google your full name in quotes, plus your city, plus your phone number. Also check the big people-search sites directly since they don’t all surface on page one: Whitepages, Spokeo, BeenVerified, MyLife, Intelius, Radaris, FastPeopleSearch, TruthFinder, Nuwber, PeopleFinders, USSearch, and PeopleLooker turn up for almost anyone with a US address history.

Expected output: 10 to 25 listings, usually with your age range, current and past addresses, and the names of relatives. Some browser extensions inject their own tracking into these exact pages while you’re looking at them, which is worth knowing before you install one, and it’s the whole reason I wrote /blog/what-browser-extensions-can-see.

If it breaks: results come back thin, try your maiden name, a middle initial, or an old address. A few sites block indexing on paid profiles too, so a broker can still be listing you even when Google shows nothing.

2. build your target list

Turn what you found into a spreadsheet: broker name, direct URL to your listing, direct URL to their opt-out page, date submitted, and a follow-up date 30 days out. California’s data broker registry is a decent way to find smaller brokers you’ve never heard of, since state law requires anyone selling personal information to register there.

Expected output: 15 to 25 targets, not just the five everyone already knows.

If it breaks: opt-out pages move constantly. If a link 404s, search “[broker name] opt out” directly, or check the Wayback Machine for the last working path.

3. set up a verification identity

Create the dedicated email and, if you can, a phone number that isn’t tied to your daily driver.

Expected output: an inbox and number you can check without your personal one filling up with confirmation links and the sales calls that tend to follow.

If it breaks: the first time I did this I used my real cell number on nine different sites to save time. I got calls from three separate “reputation management” companies within two weeks. Use the burner.

4. submit the opt-outs, one broker at a time

Work down your spreadsheet. Most brokers want you to find your own profile, copy its URL, and paste it into an opt-out form. Whitepages does exactly this at whitepages.com/suppression-requests. A few want an email instead of a form.

Expected output: a confirmation email or on-screen message for each submission. Save it.

If it breaks: some brokers loop you through a CAPTCHA or claim your request “couldn’t be processed.” Try a different browser or wait 24 hours before resubmitting. Don’t spam the form, a few sites treat repeated submissions as a reason to flag the request as spam itself.

5. don’t hand over your ID unless the broker actually needs it

A handful of brokers ask for a photo ID to “verify” a removal request. Some genuinely need it because your name is common and they can’t tell which profile is yours. Most don’t. Sending your driver’s license to a site whose entire business model is monetizing personal data is how a privacy cleanup turns into a bigger problem than it started as.

Expected output: for the sites that don’t strictly require ID, an opt-out confirmation with nothing more than your name, date of birth, and city.

If it breaks: if a broker refuses to remove your listing without ID and you’re not comfortable providing it, cite the FTC’s 2014 report on the data broker industry in your written request. Several brokers will process a removal without ID once you push back on paper.

6. log it and set follow-ups

Update your spreadsheet with the date and outcome for every submission, then set a reminder 30, 45, and 90 days out per broker.

Expected output: a tracker that tells you exactly what to recheck and when, instead of you guessing from memory.

If it breaks: if you lose track of what you submitted, just restart from step 1. It costs an evening, not a disaster.

7. verify removal, then check again quarterly

Search your name again after 30 and 45 days. For a quick spot-check on a single listing without opening a browser:

curl -s "https://www.whitepages.com/name/Jane-Doe/City-ST" | grep -qi "Jane Doe" && echo "still listed" || echo "clear or blocked"

This only works on brokers serving plain HTML. Plenty render behind JavaScript or block scripted requests outright, so treat a “clear” result as a hint, not proof, and still check manually.

Expected output: either the listing is gone, or you get a match and know it’s still live.

If it breaks: a broker relists you, which is common since they rescrape voter files and property records every few months. Resubmit the opt-out. Most take under 10 minutes the second time since you already have the URL saved.

common pitfalls

  • using your real personal email on every form, which just gets you nine confirmation emails and a slow trickle of “reputation management” sales calls for the next month
  • treating one round of opt-outs as done. most people-search sites relist you within 3 to 6 months because the underlying source data gets rescraped, not because your first request failed
  • confusing an opt-out page with an account deletion flow. some brokers put a “delete my info” link that actually starts a paid membership signup, read the page before you click through
  • assuming your legal rights travel with you. California residents can point to the CCPA when a broker drags its feet, see the California AG’s CCPA page. Most other states have nothing comparable, so a broker outside California can just ignore a slow request. This isn’t legal advice. If a broker won’t comply and you’re in a state with a real remedy, that’s a conversation for a privacy attorney, not a blog post
  • sending ID everywhere out of habit, covered in step 5, worth repeating because it’s the mistake I see most often

scaling this

Doing this for yourself is a spreadsheet and an evening. Doing it for your household, a spouse, maybe two kids once they’re old enough to have a footprint, is still a spreadsheet, just with more rows and more burner identities so the confirmation emails don’t tangle together.

Past about 10 people, the browser-by-browser workflow starts to hurt. You’re hitting the same broker’s opt-out form dozens of times from one IP, and a few of them will start throwing CAPTCHAs at you or rate limiting the connection. That’s the point where I’d start rotating the sessions that keep getting flagged through a proxy instead of a plain VPN. Our /blog/vpn-vs-proxy-which-do-you-actually-need piece covers why: a VPN exit IP is one every other person doing the same cleanup is also hitting, a residential proxy isn’t.

At 100 people, a spreadsheet stops being honest work and starts being a liability, you’ll lose track of who verified what. This is roughly where DeleteMe, Incogni, and Optery stop looking expensive. I don’t use any of them myself, mostly because none of them catch every regional broker, so you still end up doing manual cleanup on the long tail even after paying. But if you’re managing removals for other people, even a handful, the tracking and liability of holding someone else’s personal data in a spreadsheet is a different problem than doing your own.

At 1000, you’re not doing this by hand anymore, full stop. You’re either building the same infrastructure the paid services already run, broker relationships, automated resubmission, a real database instead of a spreadsheet, or you’re reselling access to one of them. At that scale it stops being a privacy chore and starts being a business, with its own liability questions I’m not going to wave away in a how-to post.

where to go next

If you got this far, the rest of your exposure usually isn’t sitting on a people-search site, it’s coming out of your own devices. Check /blog/how-to-audit-what-your-phone-apps-are-sharing next, since a lot of what ends up on broker sites started as an app permission you approved without reading. After that, /blog/location-history-is-the-most-sensitive-file-you-own and /blog/who-can-see-your-fitness-data cover two specific categories of data that brokers want more than almost anything else. The rest of what we’ve written is at /blog/.

Written by Xavier Fok

disclosure: this article may contain affiliate links. if you buy through them we may earn a commission at no extra cost to you. verdicts are independent of payouts. last reviewed by Xavier Fok on 2026-09-28.

from the team
Want a real mobile IP, not a datacenter VPN endpoint?

Shared VPN exit nodes get flagged and blocked. Singapore Mobile Proxy runs real 4G/5G mobile IPs that give you a residential-grade address carriers still trust.

see how it works →
read on
More from The Privacy Wire

VPN and tool reviews, realistic opsec guides, and privacy news for people who want to protect their data.

browse all articles →