← All articles

How-to

What Are Data Brokers Collecting? A 2026 Guide

Updated October 21, 2026 10 min read

What Are Data Brokers Collecting? A 2026 Guide

Table of Contents

Last Updated: October 14, 2026

What Are Data Brokers and Why They Collect Your Information

Understanding what data brokers collect matters if you care about your privacy: these companies maintain detailed dossiers spanning contact details, browsing habits, purchase history, and inferred interests.

Brokers collect it because there's a profitable market: retailers target customers, financial institutions assess risk, and advertisers build audience segments.

At cybersweep analytics, we help people understand what information brokers hold and how to request removal of eligible data.

What Information Do Data Brokers Collect

Data brokers cast a wide net, but the clearest way to understand what they hold is to separate observed fields from inferred ones. Observed facts can sometimes be corrected or removed; inferred attributes are predictions a broker may refuse to change.

Contact, Identity, and Demographic Fields

These anchor fields let a broker match records to a single person. A typical profile includes:

  • Full name and known aliases, including maiden names and name variants
  • Current address and prior addresses, often with move-in and move-out dates
  • Phone numbers, including landlines, mobile numbers, and VoIP numbers
  • Email addresses, both primary and secondary
  • Date of birth and age range
  • Household composition, who else lives at the address, and their relationship to you
  • Marital status and, in some profiles, divorce history
  • Homeowner or renter status, property value, and mortgage presence
  • Education level, schools attended, and degrees

Most of these fields are observed, drawn from public records, voter files, property deeds, and commercial data feeds.

Financial and Transaction Fields

Financial data is where profiles get granular:

  • Purchase history, what you bought, from which retailer, when, and how much
  • Loyalty program membership and activity
  • Subscription services and recurring payments
  • Estimated household income, often modeled from property value, ZIP code, and spending patterns
  • Credit indicators such as whether you carry balances or have recent inquiries
  • Mortgage, lien, and bankruptcy records pulled from public filings
  • Vehicle ownership and registration
  • Insurance products held, when reported by data suppliers

Some are observed (a loyalty transaction, a recorded mortgage); others, like estimated income, are modeled, meaning the broker guesses based on patterns.

Behavioral and Online Activity Fields

Digital activity produces the largest volume of fields, commonly including:

  • Websites visited and time on page
  • Search queries
  • App installs, opens, and in-app events
  • Advertising identifiers, the resettable ID assigned to a mobile device
  • Cookie IDs and browser fingerprints
  • Device type, operating system, and browser version
  • IP address and approximate location derived from it
  • Precise location history from mobile apps that requested location permission
  • Social media engagement, posts, likes, shares, follows

These are almost entirely observed signals, though how they are grouped into interests is not.

Inferred Attributes and Predictive Segments

Brokers run models over observed fields to predict characteristics you never revealed, including:

  • Interest categories (e.g., outdoor recreation, luxury travel, pet ownership)
  • Life-stage segments (e.g., new parent, recent retiree, empty nester)
  • Political leaning estimates
  • Health-interest flags based on searches and site visits
  • Financial-status tiers such as "credit-active" or "budget-conscious"
  • Propensity scores, likelihood to buy a category, donate, or churn

These are packaged as audience segments and sold to advertisers, marketers, and analytics firms. Because they are predictions rather than facts, brokers treat them as proprietary and are far less willing to correct or remove them.

Key Takeaway When you review what a broker holds, ask two questions about each field: was this observed (a record of something you actually did) or inferred (a model's guess)? Observed fields are more likely to be correctable; inferred fields usually are not.

Sensitive Categories and Inference Boundaries

Some consequential fields sit at the boundary between observation and inference. Health conditions, precise location, and financial hardship may be directly collected, for example, when a health app shares data with a third party, or inferred from unrelated signals like search history. Direct collection means a specific record exists; inference means the broker is predicting, and the prediction may be wrong.

How Do Data Brokers Get Your Information

Data brokers use multiple channels to source personal information, which explains why their profiles are so comprehensive.

Infographic visualizing how data brokers collecting personal information track user activity across devices
Infographic visualizing how data brokers collecting personal information track user activity across devices

Public Records as Primary Sources

Government records are a primary source.

Brokers harvest these sources systematically, scraping government websites, purchasing bulk data from agencies, and cross-referencing it with other data points.

The legal availability of public records means brokers can acquire this information without consent. You cannot opt out of public records themselves, though you may be able to request removal from specific broker platforms.

Online Tracking and Digital Footprints

Every time you browse the web, you leave traces brokers collect.

Mobile apps are prolific collectors, requesting access to your location, contacts, calendar, and browsing history, and many share that data with third parties, including data brokers.

Social media platforms generate enormous behavioral data. Your posts, likes, shares, and clicks create a detailed activity log that brokers purchase or scrape from public profiles.

Data Purchases and Aggregation

Beyond data brokers collecting information directly, they also buy data from companies with direct consumer relationships.

Financial institutions sell customer data. Banks, credit card companies, and insurers hold detailed financial information, some of which flows to brokers through legal data sales.

Marketing firms and advertising networks accumulate behavioral data at scale and sell it to brokers.

How Data Brokers Build Your Profile

A broker's profile of you is built through identity resolution and data enrichment, combining multiple sources into one unified record. A realistic example shows how.

Step 1: An Anchor Record Enters the System

Suppose you buy a home. The county records the deed with your name, the property address, the sale date, and the mortgage lender. A broker's automated system picks up that record by scraping the county portal or purchasing a bulk file.

At this point the broker has a single record with a name, an address, and a transaction. That is the anchor.

Step 2: Matching Against Existing Data

The broker searches its databases and purchased feeds for records that appear to belong to the same person, matching on:

  • Exact identifiers, name plus address, or name plus date of birth
  • Probabilistic identifiers, similar name spellings, a prior address, a shared phone number

The goal is to link your records and avoid linking someone else's. Errors creep in: two people with the same name in one ZIP code can be merged, and one person with a name change can be split into two.

Step 3: Enrichment From Commercial Feeds

Once the anchor is matched, the broker layers on fields from suppliers: a loyalty program reports pet-food purchases, a marketing list adds an email and phone number, and a mobile advertising feed attaches a device identifier seen at that address.

Step 4: Inference and Scoring

With enough observed fields, the broker runs models to generate inferred attributes: pet-food purchases become a "pet owner" flag, property value and mortgage presence become an income tier, and location history becomes visited-venue categories. These are predictions, not facts you provided.

Get Started Today →

Step 5: Packaging and Sale

The finished profile is grouped into audience segments and sold or licensed. A retailer might buy the "pet owner, high-income, recent mover" segment for direct mail; an analytics firm might license the raw fields. The same profile can be sold many times over without your involvement.

Step 6: Refresh and Reappearance

Profiles are not static. Brokers refresh data as new records arrive. If you request removal from one broker, that broker may stop listing you, but the underlying source data still exists, other brokers may still hold a profile, and new records can cause your information to reappear on a site you previously opted out of.

Watch Out Removal from one broker does not remove you from the ecosystem. Because profiles are built from shared sources and refreshed over time, reducing your exposure usually means submitting requests across multiple brokers and revisiting them periodically.

Why This Matters for Accuracy

Because every step can introduce error, profiles frequently contain stale addresses, mismatched relatives, or inaccurate inferred attributes.

To reduce what brokers hold, identify which brokers list you and submit removal requests for eligible records, then repeat over time as new data is collected. Cybersweep analytics helps by identifying brokers that hold your information and submitting removal requests.

Data Broker Opt-Out Request Template and Process

Requesting removal from a data broker typically involves contacting the broker directly and providing proof of identity.

Most brokers have online opt-out forms requiring your full name, current address, and sometimes additional identifying information.

Here's a basic template for an opt-out request email if a broker doesn't have an online form:

Subject: Request to Remove Personal Information

Dear [Broker Name] Data Privacy Team,

I am writing to request removal of my personal information from your database. Please remove all records associated with the following information:

Full Name: [Your Name] Current Address: [Your Address] Phone Number: [Your Phone] Email Address: [Your Email] Date of Birth: [Your DOB]

I request confirmation once my information has been removed from your systems and from any third parties to whom you have sold my data.

Thank you, [Your Name]

The challenge is scale: there are hundreds of data brokers, manually contacting each is time-consuming, and many make opt-out deliberately difficult.

How Long Does Data Broker Removal Take

Removal timelines vary significantly by broker and information type.

Most brokers acknowledge opt-out requests within a few days, but actual removal takes longer, typically 30 to 60 days to process and update systems.

Some factors affect timing:

  • Broker responsiveness: Some brokers process requests quickly. Others are slow or require follow-up communications.
  • Data type: Some information is easier to remove than other data. Contact information is usually removed relatively quickly. Inferred attributes or aggregated data may take longer.
  • System updates: Brokers may need time to update their databases and notify customers who purchased your data.

Removal from one broker doesn't mean your information is gone everywhere.

That's why ongoing attention matters: new data is continually collected and sold, and periodic removal requests help reduce your exposure over time.

What You Should Know About Data Accuracy and Corrections

Data broker profiles often contain errors. Your information may be incomplete, outdated, or simply wrong.

Many brokers allow you to dispute or correct information, typically by submitting a correction request with documentation.

The most practical approach is to request removal rather than correction, which eliminates the problem of inaccurate data.


Your personal information is valuable, and data brokers exist to profit from it.

Federal Trade Commission guidance on data brokers and privacy

Consumer Reports on data broker practices and removal

Privacy Rights Clearinghouse information on data brokers

Frequently Asked Questions

What information do data brokers collect about me?

Data brokers collect a wide range of personal information including your name, address, phone number, email, date of birth, and employment history from public records. They also gather financial data like property ownership and transaction history, online activity including browsing behavior and search history, and inferred interests based on your digital footprint. Additionally, they compile demographic profiles, household composition, and behavioral segments used for targeted advertising and risk assessment.

How do data brokers get your information without your permission?

Data brokers obtain information through multiple legal channels. They purchase data from retailers, loyalty programs, and survey companies. They scrape publicly available information from property records, court documents, and voter registrations. Online tracking occurs through cookies, pixels, and device identifiers that follow your activity across websites and apps. They also buy information from data aggregators and combine multiple sources to create comprehensive profiles. Most of this collection happens without explicit user consent because the data comes from public sources or third-party sales.

Can I request data brokers remove my information?

Yes, you can submit opt-out requests to data brokers, though the process varies by company. Most brokers require you to verify your identity and submit requests through their websites. Some accept email requests, while others require postal mail. The request typically asks the broker to remove your information from their databases and future sales. However, results vary, some brokers process requests quickly, while others take weeks or longer. Additionally, information may reappear if the broker reacquires it from new sources, so removal is not necessarily permanent.

How long does it take to remove data from data brokers?

Removal timelines vary significantly depending on the data broker and their processing capacity. Some brokers may acknowledge a request within days, while processing can take weeks to several months. The timeframe also depends on how thoroughly the broker searches their databases and how quickly they implement the removal. Since you typically need to contact multiple brokers individually, the overall process to reduce your exposure across the industry takes considerable time. There is no guaranteed removal timeline, as third parties control their own processes.