Data Broker Opt-Outs: Which Sites to Hit First and Why Order Matters

By MercPrivacy · Published 2026-08-18 · Updated 2026-09-07

Order your data broker opt-outs by reach: the aggregators that supply everyone else first, then the people-search sites that display you, then the marketing brokers. Log every request and ask for suppression, not just deletion.

A data broker opt-out list works best when it is ordered by reach rather than by whichever site you found first. Start with the aggregators that compile and license your record to everyone else, then the people-search sites that display it, then the marketing brokers that sell you as a segment. The order matters because a front-end opt-out is rebuilt on the next data refresh if the supplier still holds the record.

This article explains how to sort brokers into tiers, how to recognize which tier a site belongs to without a published directory, the verification traps that cost people privacy while they are trying to protect it, why a log is the difference between a project and a habit, what a state deletion right adds, and the difference between suppression and deletion. “Opt out everywhere” is not a plan; sequence and follow-through are.

“The clients who get the furthest are not the ones who fill out the most forms. They are the ones who kept a spreadsheet, went after the suppliers before the storefronts, and came back to check on a schedule instead of hoping.”


The Three Tiers of Data Brokers, Ranked by Reach

Every broker you will meet fits one of three roles, and the role decides both the priority and what to ask for.

TierWhat they doHow you find themWhat to request
AggregatorsCompile public records, credit-header data and commercial feeds into one record and license it wholesale to many sitesNamed as data sources in people-search privacy policies and on public state broker registries; rarely visible in search resultsSuppression of the record from licensing and display, plus deletion of the current profile
People-search front endsDisplay the licensed record under their own brand; one parent often runs many brandsSearch your name with your city, phone or address; check the footer and privacy policy for the parentRemoval of each listing and suppression across all of the parent's brands
Marketing brokersSell you as a segment: homeowner, new mover, age band, interest, income modelFooters of unsolicited mail and email; industry opt-out portals; state registriesOpt-out of sale and suppression from all marketing files

Specialty services such as reverse phone lookups, background-check resellers and address-lookup tools behave like front ends and belong in the second tier. The marketing tier matters less for safety and more for volume; it is where the modeled you lives, the version of you that is inferred rather than recorded, and it drives the calls, texts and mail that arrive addressed to a person you only partly recognize.

How to Build Your Own Prioritized List

Run five searches in a private browser window: your name with your city, your name with your phone number, the phone number alone, your email address alone, and your street address alone. Note every site on the first three pages of each. Group the results by owner, using the footer, the privacy policy and the opt-out URL, since sites that share one of those usually share a database.

Then read the “where we get our data” section of the largest front ends. It names the aggregators, sometimes by category and sometimes by company. Several states, Texas among them, now require data brokers to register, and the public registries are the closest thing to a directory of the wholesalers; verify the current registry and its scope before relying on it. Order the finished list as suppliers first, then the front ends that show your current address and phone, then the ones that show only stale data, then the marketing brokers.

Be honest about the time. A first pass across all three tiers is days of work rather than an afternoon, and the trade-offs in doing removal yourself versus using a service come down to whether you will still be doing it in six months.

Verification Traps That Cost You Privacy

Opt-out forms are designed by the companies you are opting out of, and some of them collect more than they release. Watch for these patterns.

  • Requiring an account to submit a request, which creates a fresh record tied to a verified email.
  • Confirmation links sent to your email, which confirm a live address; use a dedicated address for opt-outs only.
  • Phone verification by text or call, which confirms a live number; consider whether the listing is worth it.
  • Uploading a government ID, which hands the broker a document far more valuable than the listing; if a site insists, send a redacted copy showing only the fields it says it needs.
  • Paid “premium removal” or expedited options from the very site that published you.
  • Third-party sites that offer to remove you for a fee and are themselves brokers collecting the details you submit.

Never pay a people-search site to remove the record it chose to publish, and never upload an unredacted government ID to anyone. Legitimate opt-out processes need to match a name, an address and sometimes a date of birth; they do not need your license number or your photo.

Keeping a Log That Makes the Work Repeatable

A log is what turns a weekend of forms into a process. Record the broker, its tier, the exact URL of the listing, what data it showed, the date submitted, the method, any confirmation number or email, the response and its date, the current status and the date of the next check. Take a screenshot of the listing before you submit and another after; the before image is your evidence if you later exercise a state right against a broker that ignored you.

Re-check thirty days after the first pass, then quarterly. Refreshed feeds recreate listings without malice or notice, and the log tells you which brokers hold a suppression flag and which merely deleted a copy. If the list is longer than the time you have, the free 30-minute privacy assessment will show which tier each of your listings sits in and what is worth chasing first, with no commitment attached.

What a State Deletion Right Adds

A courtesy opt-out depends on the broker's goodwill. A statutory right creates a duty. A growing group of states, Texas included, give residents rights to access their data, to delete it and to opt out of its sale, with response deadlines and enforcement by the state attorney general. The current map is in the state privacy rights overview, and it changes every legislative session, so verify the current text before relying on any provision.

The limits matter as much as the rights. Most of these laws exempt information that is publicly available, which is exactly the source of a people-search listing, and they exempt data used for credit reporting and fraud prevention. Not every broker meets the thresholds that trigger the law. What the right adds, where it applies, is a paper trail, a deadline and a regulator, which is enough to move brokers that ignore courtesy requests. California has gone further with a single state-run request that registered brokers must honor; check its current status. None of this is legal advice, and a dispute over a broker's refusal is a matter for an attorney.

Suppression Versus Deletion

The two words are used interchangeably on opt-out pages and mean different things. Deletion purges the record. Nothing then stops the broker from rebuilding it when it next ingests the same public records, which is why a “your profile has been deleted” email is so often followed by a reappearance. Suppression keeps a minimal flag that says this person is not to be displayed or licensed, so the record is screened out on each refresh.

For aggregators and people-search sites, ask for both: delete the current profile and suppress future ones. For marketing brokers, suppression from all files and an opt-out of sale is the meaningful request, since deletion of a modeled segment means little. Understanding what a data broker knows and how it is assembled makes the distinction obvious: the raw sources never go away, so the flag is what protects you.

Where MercPrivacy Fits

MercPrivacy's data privacy work is this process run properly. We map your exposure, tier the brokers that hold it, submit and pursue removal, suppression and do-not-sell requests in the order that holds, handle verification without handing over more than a request needs, keep the log, and monitor so that a rebuilt listing is resubmitted rather than rediscovered. Where a state right applies, we use it; where a broker refuses and the matter requires legal representation, a licensed attorney is engaged.

We are not a law firm and do not give legal advice. We do not promise that any particular broker will comply or that a listing will never return. Our fee is a straightforward recurring service fee for our own investigative, documentation and administrative work, set out in writing before any work starts.

Frequently Asked Questions

Which data brokers should I opt out of first?

The aggregators that compile your record and license it to the people-search sites, because a front-end removal is rebuilt on the next refresh if the supplier still holds the data. Find them in the “data sources” sections of the largest people-search privacy policies and on public state broker registries. Then work the front ends showing your current address and phone, then the marketing brokers.

How many data brokers do I need to opt out of?

More than appear in a search. Hundreds of companies are listed on the public state registries, and the number of people-search brands is larger still because one parent runs many. In practice a first pass covers the aggregators plus every site that shows your current data, and the log grows as new brands surface. Treat the count as a moving target rather than a finish line.

Do I have to send my ID to opt out of a data broker?

Some sites ask for it, and you should never send an unredacted copy. If a site insists on a document, redact everything except the fields it says it needs to match, usually name and address, and never include the license number or photo. Use a dedicated email address for opt-outs, and weigh whether a listing is worth a phone verification that confirms your number is live.

Does opting out of data brokers stop spam calls?

It reduces the resupply, which is the point. Calls and texts come from lists that were built from broker data, and the lists already in circulation keep working until they age out. Suppression at the brokers means fewer new lists carry your number, but it does not recall the old ones, so pair it with an evidence file for the callers that continue.

What is the difference between opting out and deleting my data?

Deletion purges the current record; suppression flags you so the record is not rebuilt or displayed on the next data refresh. Deletion alone is why listings reappear after a confirmation email. Ask people-search sites and aggregators for both, and ask marketing brokers for suppression from all files and an opt-out of sale, since deleting a modeled segment means little.

Order beats effort. MercPrivacy tiers the brokers that hold your record, runs removal, suppression and do-not-sell requests in the sequence that holds, keeps the log and monitors for the listings that get rebuilt. The free assessment shows you where you are exposed and which tier to chase first. Stephanie answers instantly and free, or book your free 30-minute privacy assessment with a specialist at (830) 587-5011.

Start Your Free Privacy Assessment Ask Stephanie

This article is for educational purposes only and is not legal advice. MercPrivacy is not a law firm; when a matter requires legal representation, a licensed attorney is engaged. Statutory figures are the amounts the statutes provide, not predictions of any outcome, and laws change — verify the current text before relying on it.