Data Broker Cleanup Guide | UNDERRATED Privacy

Data brokers collect, package, sell, and republish personal information: names, aliases, addresses, phone numbers, relatives, emails, property records, voter records, court records, purchase behavior, demographics, and location-adjacent data.

This guide shows you how to reduce your exposed personal information, freeze major consumer reports, opt out of people-search sites, reduce junk mail and spam calls, handle exposed addresses and phone numbers, use removal services intelligently, and maintain the cleanup over time.

This is not a one-time task. Data broker cleanup is recurring maintenance.

This guide is not legal advice. Privacy rights vary by jurisdiction, and public-record suppression rules are highly location-specific.

Threat model

What this cleanup reduces

Data broker cleanup is damage reduction. It is meant to make your current address, phone number, family links, and identity-verification details harder to find and harder to abuse.

Personal safety

Doxxing, stalking, harassment

Reduce easy access to your current address, relatives, household links, and location-adjacent information.

Account takeover

SIM swapping and social engineering

Reduce exposed phone numbers, carrier clues, family details, and answers attackers use against support teams.

Identity abuse

Fraud and identity theft

Pair broker cleanup with credit freezes, specialty freezes, carrier locks, and stronger recovery methods.

Noise reduction

Junk mail, robocalls, people-search spam

Lower the amount of personal data circulating through marketing lists and people-search databases.

Limitation: this guide does not erase you from the internet. Public records, court records, property records, business filings, voter rolls, data breaches, and archived pages may still expose information. The goal is reduction, not perfection.

Recommended services

Use removal services as leverage

If you want to take this seriously, use a data removal service early instead of waiting until after you manually burn out. We recommend Optery and EasyOptOuts.

Low-cost baseline

EasyOptOuts

The simplest recurring cleanup option for people who want broad removals without turning data broker cleanup into a second job.

Best low-cost default.
Good to keep active long-term.
Useful for broad recurring cleanup.
Less focused on detailed reports and custom removals.

Serious cleanup

Optery

The stronger choice when your home address, phone number, relatives, aliases, or old addresses are widely exposed.

Start with Ultimate for 3 months.
Use reports to identify major leaks.
Submit custom removals for high-risk listings.
Downgrade later, then upgrade every 6 months as needed.

Do not outsource judgment: removal services help with repetitive broker work, but you still need to handle freezes, carrier security, public records, exposed addresses, exposed phone numbers, email aliases, and high-risk listings yourself.

Working checklist

Use this checklist while you work through the guide

Use this as a working checklist. Complete the highest-risk items first: freezes, carrier protection, current address exposure, primary phone exposure, and recurring rechecks.

Printable version

Save or print the checklist

Open a branded checklist page you can use in your browser, print, or save as a PDF.

Open printable checklist

Step 1

Understand what data brokers expose

Data brokers combine public records, commercial databases, app data, breach data, and people-search profiles into easy-to-search identity dossiers. You cannot remove every source, but you can reduce the most dangerous exposures first.

Official records

Public sources

Property records, court records, voter files, business registrations, professional licenses, and domain records.

Commercial data

Marketing sources

Retail loyalty programs, warranty cards, purchase behavior, demographics, and marketing databases.

Online activity

Web sources

Social media profiles, old forum accounts, genealogy sites, people-search pages, usernames, and public posts.

Security failures

Breach sources

Leaked emails, phone numbers, passwords, addresses, usernames, partial identity data, and old account records.

Common exposed fields

Full name Aliases Age Date of birth Current address Previous addresses Phone numbers Email addresses Relatives Roommates Neighbors Property ownership Estimated income Political guesses Vehicle guesses Criminal/civil records Professional licenses

Priority: focus first on current home address, primary phone number, relatives, old addresses, and anything that makes identity theft, stalking, SIM swapping, swatting, or social engineering easier.

Step 2

Start with a personal exposure inventory

Before opting out, document what is exposed. The goal is to find your most dangerous public links first: current address, primary phone number, relatives, old addresses, and accounts that connect back to you.

Search queries

"Full Name" "City" "Full Name" "Street Address" "Full Name" "Phone Number" "Full Name" "Email Address" "Phone Number" "Name" "Address" "Name"

Search name variations

Legal name
Nicknames
Maiden name
Old usernames
Old addresses
Business names
Spouse, partner, parent, and relative names

Use multiple search engines

Google
Bing
DuckDuckGo
Brave Search

Track each result

Create a broker opt-out spreadsheet

Site URL What is exposed Opt-out link Date submitted Email used Verification required Removed? Date checked again Notes

Email rule: do not use your main email for broker opt-outs. Use a dedicated privacy alias for removal requests. For broader account compartmentalization, see the Build Your Privacy Stack guide.

Step 3

Freeze your credit reports

A credit freeze prevents most new creditors from accessing your credit file. This makes it harder for someone to open new credit accounts in your name. A freeze is free to place, temporarily lift, or remove.

01 Equifax

Freeze your Equifax credit report.

02 Experian

Freeze your Experian credit report.

03 TransUnion

Freeze your TransUnion credit report.

Save in your password manager

Equifax login
Experian login
TransUnion login
PINs if issued
Recovery email and phone
Date frozen

Account security

Use unique passwords.
Use hardware-key, passkey, or strong MFA where available.
Document how to temporarily lift each freeze.
Do not store freeze credentials only in email.

Step 4

Add fraud alerts if you are actively at risk

A fraud alert tells creditors to verify your identity before opening new credit. Use it when active fraud may already be happening, not as a replacement for freezes.

Use a fraud alert if

Your wallet or identity documents were stolen.
Your SSN was exposed.
You are dealing with identity theft.
You received a serious breach notification.
You suspect someone is applying for credit as you.

Default rule

A credit freeze is usually stronger for prevention. A fraud alert is an extra layer when risk is active or recent.

Step 5

Freeze secondary consumer reports

Most people stop after Equifax, Experian, and TransUnion. That is incomplete. Secondary reporting systems can be used for bank accounts, utilities, telecom, insurance, identity verification, background screening, and risk scoring.

Credit reporting

Innovis

Smaller credit reporting agency. Freeze it and store the login, PIN/passcode if issued, and date frozen.

Banking

ChexSystems

Used by many banks and credit unions when opening checking or savings accounts. Helps reduce fraudulent deposit-account openings.

Identity verification

LexisNexis / SageStream

Used for identity verification, risk scoring, insurance, collections, and background-style products. May need temporary lifting for some verification flows.

Telecom and utilities

NCTUE

Used by telecom, pay TV, internet, and utility providers. Matters if someone may try to open phone, internet, cable, or utility accounts in your name.

Store this: save each freeze login, PIN/passcode if issued, recovery email, recovery phone, date frozen, and temporary lift process in your password manager.

Step 6

Opt out of prescreened credit and insurance offers

Prescreened credit offers are a privacy and fraud risk because they create mail that signals your name, address, and creditworthiness.

Official opt-out site

OptOutPrescreen

This is the consumer credit reporting industry opt-out site for prescreened credit and insurance offers.

Open OptOutPrescreen

Your options

5-year electronic opt-out online.
Permanent opt-out by mailed form.

Register with the National Do Not Call Registry

Register your mobile and home numbers to reduce legitimate telemarketing and create a reporting path. It will not stop scammers or criminal robocalls, but it is still worth doing.

Official registry

National Do Not Call Registry

Add your phone number at the official FTC registry.

Open Do Not Call Registry

Can reduce

Legitimate telemarketing
Some compliant sales calls
Repeat calls from companies following registry rules

Will not stop

Scammers
Political calls
Charities
Debt collectors
Companies you gave permission to contact you
Robocalls from criminals

Step 8

Opt out of people-search sites

People-search sites are the highest priority because they turn exposed data into an easy attacker workflow. Start with sites that expose your current address, phone number, relatives, and property links.

Remove first

Current address
Primary phone number
Relatives and household links
Property ownership links

Then remove

Old addresses
Old phone numbers
Email addresses
Associates and duplicate profiles

View people-search sites to check Expandable list of common broker and people-search sites.

Common sites

Search your name, phone number, current address, old addresses, and relatives across these sites. If a profile is removed, search again later for duplicate or rehydrated listings.

Whitepages Spokeo BeenVerified PeopleFinders Intelius TruthFinder US Search FastPeopleSearch That’sThem TruePeopleSearch Radaris MyLife ClustrMaps FamilyTreeNow PeekYou CyberBackgroundChecks PublicDataUSA SearchPeopleFree VoterRecords-style sites

Workflow: search yourself on each site, remove the profile, then search again by name, phone number, and address. Many brokers create duplicate profiles or rehydrate old listings later.

Step 9

Use a repeatable opt-out workflow

Treat each broker removal like a small case file. Capture the profile, submit the request, verify completion, and recheck later. This prevents duplicate listings and reappearing profiles from slipping through.

01

Find

Search for your profile and copy the exact listing URL.

02

Document

Screenshot the listing and record what is exposed.

03

Submit

Send the opt-out request and verify by email if required.

04

Track

Record the date, email used, verification status, and broker response.

05

Recheck

Search again after 7–30 days using name, phone number, and address.

06

Repeat

Look for duplicate listings, rejected removals, and profiles that reappeared.

Important: many brokers create duplicate profiles. Search again after removal instead of assuming one successful opt-out handled every listing.

Workflow warning

Do not blindly upload your ID

Some brokers ask for identity verification before processing an opt-out. Avoid sending ID unless it is legally required or unavoidable. When verification is required, send the minimum necessary information and make the file useless outside that specific request.

Redact first

Use a copy, not the original file.
Redact photo if not required.
Redact ID number if not required.
Redact barcode if not required.
Redact signature if not required.

Add context

Add broker name.
Add request date.
Add a purpose-specific watermark.
Keep a copy of what you sent.
Record why the broker required it.

Example watermark

FOR OPT-OUT VERIFICATION ONLY
Provided to [Broker Name]
Date: 2026-06-12
Not valid for financial, employment, or identity verification

Never send unless truly unavoidable

Full SSN Passport number Full driver’s license number Unredacted utility bill Bank statement Tax document

Step 10

Use privacy laws where available

Privacy laws can help with access, deletion, correction, opt-out, objection, and appeal requests. They are useful, but they are not universal deletion buttons. Use them alongside normal broker opt-outs, removal services, and manual verification.

California

CCPA / CPRA

Request deletion, correction, and opt-out of sale or sharing. California also has data-broker-specific deletion infrastructure developing through the Delete Act.

EU / EEA / UK

GDPR-style rights

Request access, erasure, restriction, objection, rectification, and limits on profiling or direct marketing.

Colorado / opt-out signals

CPA + GPC

Request deletion and opt out of sale, targeted advertising, and profiling. Colorado recognizes universal opt-out mechanisms such as Global Privacy Control.

Other U.S. states

General deletion request

Many states include some mix of access, deletion, correction, opt-out, and appeal rights. Even when unsure, send a plain deletion and suppression request.

Important: legal requests can create new privacy risk. If a broker asks for ID, redact aggressively, watermark the file, and only provide what is actually necessary for verification.

Step 11

Handle exposed home addresses

An exposed home address is one of the most dangerous data points. Search address-first, remove the highest-risk listings, and reduce future leaks before they reach brokers.

Address-first searches

"123 Main Street" "Your Name" "123 Main St" "Your Name" "123 Main Street" "Phone" "123 Main Street" "Relatives"

Also search the address without your name.

Remove address exposure from

People-search sites
Property aggregator sites
Old resumes and PDFs
Business filings
WHOIS records
Social media posts
Marketplace listings
Wedding registries and donation pages
Local news comments

Use alternatives where possible

PO box
Private mailbox / CMRA
Virtual mailbox
Registered agent
Business address
Work mailing address, only if appropriate
Trusted family address, only with consent

Do not use your home address on

LLC filings
Domain registration
Payment processor profiles
Email footers
Invoices
Shipping labels and return addresses
Newsletter compliance footers

Property-record options

Use a trust, LLC, or privacy-conscious ownership structure before purchase.
Check county redaction programs.
Use address confidentiality programs if eligible.
Ask county recorder about suppression for protected classes.

Property records are hard: if you own property, your name may appear in county records. Some jurisdictions allow redaction for judges, law enforcement, domestic violence survivors, public officials, healthcare workers, or stalking victims. Rules vary heavily. Check local law.

Next step: for deeper setup, see our Address Privacy recommendations. Also read the Address Privacy guide when available.

Step 12

Handle exposed phone numbers

A phone number is an identity anchor. It can connect banks, carrier accounts, social media, messaging apps, delivery accounts, data broker profiles, two-factor authentication, and old breach records.

Phone-first searches

"555-123-4567" "5551234567" "(555) 123-4567"

Remove listings that expose the number, then search again by name and address.

Use separate numbers by purpose

Primary private number
Banking number
Public or business number
Shopping number
Dating or social number
Recovery-only number

Critical accounts

Do not use SMS 2FA where hardware keys, passkeys, or authenticator apps are available.
Keep your most private number away from store rewards, public profiles, and casual signups.
If a number has been public for years, consider replacing it if you are being targeted.

Avoid using your main number for

Store rewards
Giveaways
Dating apps
Public social profiles
Classified ads
Political donations
Petition sites
Random online forms

Lock your carrier account

Account PIN
Port-out lock
Number transfer lock
SIM swap protection
High-risk memo if available
No in-store changes without ID
No phone changes without account PIN

Next step: for more phone-specific hardening, read the Lock Down Your Mobile Phone guide when available.

Step 13

Clean up exposed email addresses

Email addresses are durable identifiers. They connect logins, password resets, receipts, breach data, marketing databases, account recovery, people-search profiles, and old accounts.

Email-first searches

"your@email.com" "old@email.com" "username" "email"

Remove email exposure from

Old forums
GitHub profiles
PDFs and resumes
Business directories
Data broker pages
Paste sites where possible
WHOIS records
Social media bios

Use aliases going forward

Banking alias
Shopping alias
Broker opt-out alias
Newsletter alias
Public contact alias
High-risk account alias

Rule: do not reuse your main email across every account. Keep your core login email private and use aliases to separate banking, shopping, broker opt-outs, newsletters, public contact, and high-risk accounts.

Step 14

Remove old accounts

Old accounts feed data brokers and breach databases. Prioritize accounts that expose your address, phone number, email address, birthday, profile photo, payment methods, or recovery paths.

Delete first

Old social media and forums
Dating apps
Shopping and delivery accounts
Fitness apps
Genealogy sites
Resume and job sites
Real estate apps
Coupon and rewards accounts
Old cloud storage and messaging accounts

Before deleting, remove

Phone number
Address
Profile photo
Birthday
Payment method
Linked accounts
Recovery email

Reality check: some services retain data after deletion, but reducing live exposure still matters. Remove sensitive fields first, then delete the account.

Step 15

Clean up breach exposure

Data brokers are not the only issue. Breaches expose emails, phone numbers, passwords, addresses, security questions, and partial identity data.

01

Check

Check breach exposure for each exposed email address.

02

Rotate

Change reused passwords and remove phone recovery where possible.

03

Harden

Turn on MFA, preferably hardware keys, passkeys, or authenticator apps.

04

Delete

Delete old accounts that are still active and no longer useful.

05

Separate

Use unique aliases going forward so one breach does not connect every account.

06

Monitor

Focus future checks on reused passwords, exposed numbers, exposed addresses, SSNs, and active accounts.

Focus on

Reused passwords
Exposed phone numbers
Exposed addresses
Exposed SSNs
Exposed security questions
Accounts still active

Security-question answers

Never use real answers. Store fake answers in your password manager.

Mother’s maiden name: purple-cement-radio-47
First car: orange-river-window-91
Childhood street: marble-lion-sunset-22

Do not panic over old breaches: prioritize accounts that are still active, reused passwords, exposed recovery methods, exposed addresses, exposed phone numbers, and anything tied to identity verification.

Step 16

Remove yourself from marketing lists

Data brokers are only one part of the problem. Retailers, loyalty programs, warranty cards, lead forms, and marketing databases also keep personal data circulating.

High-impact opt-outs

Opt out of prescreened credit and insurance offers.
Register with Do Not Call.
Opt out of sale or sharing where available.
Unsubscribe from legitimate marketing emails.

Reduce new leaks

Delete retail loyalty accounts you do not use.
Stop using your main number at checkout.
Stop giving real birthday to stores.
Stop filling warranty cards unless required.

When a cashier asks for phone or email

No, thanks.

That answer is usually enough.

Step 17

Harden public records before they leak

Some records cannot be cleaned after the fact. Before creating new records, use privacy-preserving setup so your home address, personal phone number, and personal email do not become public by default.

Domains

Use WHOIS privacy.
Use registrar privacy.
Use a separate domain email.
Use a business mailing address.
Do not use your home address in domain registration.

Business entities

Use a registered agent.
Use a business mailing address.
Use a separate business phone.
Use a separate business email.
Assume home-address filings may become public.

Donations and politics

Name
City
Employer
Occupation
Donation amount
Donation date

Court records

Sealing
Redaction
Protective orders
Address confidentiality
Victim privacy programs

Rule: assume public filings, political donations, business registrations, property records, and court records may become searchable. If safety is at risk, ask an attorney about sealing, redaction, address confidentiality, or protective-order options before filing.

Step 18

Suppress family-link exposure

People-search sites often expose relatives, roommates, associates, and household links. Your profile can reappear through someone else’s listing, so search family-link exposure directly.

Family-link searches

Your name + relatives Your address + relatives Your phone + relatives Relative name + your address

Remove profiles for

You
Spouse or partner
Parents
Siblings
Children
Roommates and former roommates
Business partners

Ask family not to publish

Your address
Your phone number
Photos of your home
Your workplace
Children’s schools
Travel dates
Vehicle plates
Mail or packages

Important: if you are high-risk, household exposure matters. Your address or phone number can reappear through a relative, roommate, former roommate, business partner, or old associated profile.

Step 19

Use an address strategy

Data broker cleanup is reactive. Address privacy is preventive. If your home address is already exposed, this guide helps reduce the damage. For future accounts, businesses, domains, packages, returns, forms, and public records, use a dedicated address strategy.

Basic rule: do not give your home address to basically any company that asks for it.

Low risk

Basic separation

Home address for government, banks, and taxes.
PO box or private mailbox for shopping.
No public posting of home address.

Medium risk

Mailbox-first setup

Private mailbox for most mail.
Registered agent for business.
Home address only for legally required accounts.
Data broker cleanup every quarter.

High risk

Public-record control

Private mailbox.
Registered agent.
No home address on public filings.
Suppression requests where eligible.
Removal service plus manual cleanup.

Next step: see our Address Privacy recommendations. Also read the Address Privacy guide when available. Do not use a mailbox address where it violates account rules or creates account risk.

Step 20

Use a phone-number strategy

Phone-number privacy is about separation. Do not let one number connect your banks, family, public identity, shopping accounts, delivery apps, social profiles, and recovery paths.

Low risk

Basic split

One private number.
One public or alias number.
Carrier account PIN.
No SMS 2FA for important accounts.

Medium risk

Purpose-based numbers

Private carrier number for banks and family.
VoIP number for shopping and delivery.
Separate public or business number.
Data broker opt-outs for all numbers.

High risk

Tight compartmentalization

True SIM/carrier number known to no one.
Separate recovery number.
Separate public number.
Separate work number.
No phone number on social media.
Carrier port lock.
Hardware keys, not SMS, anywhere accepted.

Rule: keep your true SIM/carrier number as quiet as possible. Use purpose-specific numbers instead: MySudo is useful for compartmentalized alias numbers, and Cape includes additional carrier-side numbers. The more public a number becomes, the less useful it is for recovery, banking, private identity verification, or anything you cannot afford to lose.

Step 21

Remove images and metadata

Photos and screenshots often leak more than the main subject. Check the background, edges, metadata, labels, reflections, notification areas, and visible account details before posting or sharing.

Location clues

Home exterior, street signs, license plates, school details, real-time travel, and recognizable surroundings.

Documents and labels

Mail labels, medical documents, work badges, shipping labels, receipts, and paperwork in the background.

Screenshot leakage

Usernames, emails, tabs, bookmarks, notifications, file paths, carrier names, and location indicators.

Before posting photos

Crop aggressively.
Remove metadata.
Blur mail, plates, badges, and documents.
Avoid home exterior and school details.
Avoid real-time travel posts.

Before sharing screenshots

Hide usernames and emails.
Close unrelated tabs and bookmarks.
Remove notification previews.
Check visible file paths and account names.
Crop out carrier, location, and device status details when relevant.

Rule: images expose context, not just content. Review the whole frame before publishing.

Step 22

Create a recurring maintenance schedule

Data broker cleanup decays over time. Profiles reappear, old listings get rehydrated, relatives get linked, and new accounts leak fresh data. Use a simple maintenance schedule so cleanup does not become a one-time project.

Monthly

Quick exposure check

Search your full name + city.
Search your phone number.
Search your current address.
Check top people-search sites.
Remove new listings.
Review Google results.
Review exposed social media posts.

Quarterly

Account and broker audit

Recheck all broker removals.
Search relatives linked to you.
Review credit freeze status.
Review carrier account security.
Review email aliases.
Delete unused accounts.
Check for new breach exposure.

Yearly

Public-record review

Pull credit reports.
Pull specialty consumer reports where useful.
Review public records.
Review property and business filings.
Review domain WHOIS.
Review voter registration exposure.
Replace exposed public numbers if needed.
Reassess your removal-service plan.

Step 23

Recommended cleanup stack

Pick the level that matches your risk. Do not judge success by whether every trace disappears. Judge success by whether your current home address, primary phone number, family links, and easy identity-theft paths become harder to find and harder to exploit.

Easy baseline

Low-effort recurring cleanup

EasyOptOuts
Credit freezes
Carrier port-out lock
OptOutPrescreen
Do Not Call
Manual checks every quarter

Serious cleanup

Initial deep clean

Optery Ultimate for 3 months
Manual review of dangerous listings
Custom removals for current address, phone, relatives, and aliases
Credit and specialty freezes
Address privacy setup
Phone-number compartmentalization
Monthly rechecks until stable

Long-term

Maintenance mode

Keep EasyOptOuts active.
Or keep Optery on a cheaper plan.
Upgrade Optery to Ultimate every 6 months for 1–3 months as needed.
Continue quarterly manual checks.

Best default: EasyOptOuts is the low-cost long-term baseline. Optery Ultimate is the stronger choice for the first 3-month serious cleanup cycle or periodic deeper sweeps.

Before the priority order

Keep the checklist open

Use the checklist as your working tracker: the priority order below tells you what to do first, but the checklist is what keeps the cleanup organized. Jump back to the on-page checklist or open the printable checklist.

Step 24

Practical priority order

Do not try to clean everything at once. Handle the items that reduce identity-theft risk, carrier risk, current-address exposure, and people-search exposure first.

First

Lock the easy abuse paths

Freeze Equifax, Experian, and TransUnion.
Freeze Innovis, ChexSystems, LexisNexis/SageStream, and NCTUE.
Lock your carrier account.

Opt out of prescreened credit offers.
Register with Do Not Call.
Start EasyOptOuts or Optery.
Search your name, address, phone, and email manually.

Then

Clean the dangerous links

Remove top people-search listings.
Remove current address and primary phone first.
Remove relatives and associates links.
Delete old accounts feeding the data economy.
Set monthly and quarterly rechecks.

Highest-risk exposures

Current home address Primary phone number Family links SSN exposure Carrier account weakness Unfrozen credit files Public business/property records

Final rule

Use services, but keep control

Use a data removal service, but do not outsource your judgment. Optery and EasyOptOuts are useful because they handle repetitive removals across many brokers. Optery Ultimate is the stronger choice for aggressive cleanup, especially for the first 3 months or periodic deep-clean cycles. EasyOptOuts is the better low-cost baseline for people who want recurring cleanup without much effort.

Services can help with

Repetitive broker removals
Broad recurring cleanup
Exposure reports
Custom removals where supported
Periodic rechecks

You still control

Current home address exposure
Primary phone number exposure
Family and household links
Carrier account security
Credit freezes
Public records and business filings
Old accounts and recovery paths

Build the system around the cleanup: data broker removals work best when your emails, phone numbers, browsers, payments, addresses, and recovery methods are compartmentalized.

Read Build Your Privacy Stack so new accounts do not keep recreating the same exposure.

Data broker cleanup is not deletion. It is pressure, repetition, and damage reduction.

Freeze identity systems

Remove dangerous exposure

Repeat the cleanup