Type your name and city into a search engine. Odds are decent that the first page returns a site like Spokeo, Whitepages, or BeenVerified — carrying your exact address, phone number, relatives' names, sometimes an estimated income bracket. You never sent them any of that. Someone assembled the profile and put it up for sale without asking you, and it's for sale to anyone: collections agencies, marketers, an ex who won't let go, scammers building a "your bank calling" script who already have your mother's maiden name.

This isn't a leak or a hack. It's a legal industry called data brokerage, and it works exactly as designed: collect everything collectible, sell it forward, and let the person it describes prove they'd rather not participate. In the old language, this is a stolen Shuit — your shadow, copied and put in a shop window without your say. You never agreed to have your shadow sold wholesale. But it is being sold — and the good news is that finding and pulling yourself out of that window is more doable than it sounds.

Who's doing it, and where the data comes from

Data brokers split into two tiers. At the wholesale level sit companies like Acxiom, Epsilon, LiveRamp, or Experian, selling massive datasets to businesses and ad networks. At the retail level are the sites you actually land on when you search your own name — Spokeo, Whitepages, BeenVerified, Intelius, MyLife, PeopleFinders, Radaris, TruthFinder. They pull from the same wholesale sources, package it into a ready "dossier," and sell direct access to anyone with a credit card and ten dollars.

The raw material comes from everywhere at once: public records (property filings, court records, voter rolls — legally open data in many U.S. states), store loyalty cards, apps that quietly sell your location to third parties, old breaches and leaks, and plain scraping of social media. No single source looks dangerous by itself. Stitched together, they add up to a profile you never handed anyone in full.

Registries: searching a list instead of guessing

Most jurisdictions have no law forcing a broker to tell you it holds you. A couple do have official registries that remove that blind spot.

California. Since 2024, the California Privacy Protection Agency (CPPA) has maintained a public data broker registry — a list of companies legally required to register if they trade in California residents' data. It's browsable on the agency's site, so you can check who is actually licensed to be trading your profile. Since early 2026 the same agency also runs DROP (the Delete Request and Opt-out Platform), built under California's Delete Act: you file one deletion request and it fans out automatically to every registered broker, instead of you writing to each one by hand.

Vermont. Even earlier, since 2018, Vermont's Secretary of State has run its own data broker registry — one of the first laws of its kind in the U.S. It doesn't give you a single delete button, but it gives you a list: who is legally on record as trading in data like yours.

Live outside the U.S., and there may be no registry built for you specifically — but the retail people-search sites themselves (Spokeo, Whitepages, and the rest) index people worldwide who've ever shown up in the English-language internet or in public records. The manual check below works regardless of jurisdiction.

Find yourself, manually

The registry tells you who's licensed to trade. Finding your own listing looks like this:

This takes fifteen to twenty minutes and usually turns up somewhere between five and fifteen sites that already have you listed.

Getting yourself removed: manual opt-out or a paid service

Every major broker has an opt-out page — it's just buried and deliberately made tedious. The process is similar everywhere: find your own listing, copy the link to it, fill out the removal form, sometimes confirm by email. The profile usually drops within a few weeks — until the next data refresh cycle, when it can reappear from a fresh source. This isn't a one-time cleanup; it's a recurring chore worth repeating every few months.

If working through fifteen sites by hand isn't for you, paid automation services exist — DeleteMe, Optery, Kanary, and similar tools file the requests and re-check periodically for a subscription fee. It isn't free and it isn't complete — none of them cover every broker, and you'll still want to spot-check yourself occasionally — but it moves most of the recurring work off your plate if your time is worth more than the fee.

> Our record. A data broker is Shadow Hathor as a business model: not connection, but an endless extraction loop feeding on your shadow for someone else's profit, dressed up as "just information that's already public." A record being public in a courthouse is not the same thing as consent for it to be harvested, enriched with your relatives' names, and sold to a scammer for ten dollars. Opting out isn't paranoia. It's an act of Ma'at: reclaiming the weight that was lifted off your scale without asking.

Do this today

Don't wait for a free afternoon to work through all fifteen. Open whitepages.com or spokeo.com right now, type in your full name and city, and if your listing shows up, click its own "opt out" or "remove my info" link at the bottom of the page and fill out the form. Five minutes, one site, one storefront closed. The rest can wait for next week, same process.