you are on the clearnet. the addresses listed here only open inside the tor network - download the tor browser here »
AlphaBay.Market
EN
last update: 14 min ago 260 onions tracked
home / news / Security
11 November 2026 Security 5 min read

What people-search opt-outs actually remove: the whack-a-mole reality of data broker deletion

People-search sites - Spokeo, BeenVerified, Whitepages and dozens of competitors - sell address histories, phone numbers, relatives and court records to anyone willing to pay. The standard privacy advice is to opt out: find your listing, submit a removal request, move on. The request does less than most people assume, and the removal rarely stays done.

What a removal request actually removes

The US Federal Trade Commission describes people-search sites as a type of data broker: they build reports by buying data from other brokers, scraping social media and indexing government public records - property, voter registration, criminal cases, marriages, deaths. An opt-out tells one site to stop selling the listing it has already compiled. It does not touch the underlying records, and it does not remove your details from reports sold about your relatives, neighbors or associates. The FTC's consumer guidance warns that when public-record details change, "your information could re-appear for sale on people search sites." The mechanics are per-listing as well. Spokeo's opt-out page explains that a person can have multiple listings on the site, each identified by its own URL, and each has to be opted out separately. Because the site continually receives new and updated records, the page warns that removed information may reappear without notice, and asks visitors to check back for new listings. A successful request deletes one broker's copy at one moment; the county record and every other site stay put.

Removing data by proving identity

There is an irony built into the process. To confirm a request is genuine, sites verify identity, which usually means handing the details you want hidden back to the industry you are trying to exit. The FTC states it plainly: "opting out may require you to give some information to verify your identity." California's DELETE Act mechanism tries to soften this. DROP, the state's Data Broker Requests and Opt-Out Platform, encrypts and hashes what residents submit so that "data brokers can match your data without exposing the original information."

Respiration: why listings grow back

Practitioners call the regrowth data respiration: listings deleted on one site respawning through resellers, re-scrapes, affiliate brands and refreshed bulk imports. A 2024 study by Consumer Reports, run with the security firm Tall Poppy, measured how badly it bites. Thirty-two volunteers spent four months testing seven paid removal services against thirteen people-search sites. Manual opt-outs beat every paid service: 70 percent of listings were gone within a week, against 0 to 58.7 percent for the services. The best performers, Optery and EasyOptOuts, still reached only 68 and 65 percent removal after four months, and at every checkpoint some of each participant's data remained online somewhere. The Record's coverage of the study added harder numbers: investigators tracked 332 data instances for service users and found only 117 - 35 percent - removed within four months, while deleted profiles "pop back up weeks or months later." Volunteers in New York, which has no comprehensive privacy law, saw roughly 6 percent more of their data removed than California volunteers. The same reporting found financial ties between some removal services and the very sites they claim to scrub.

What the law covers, and where it stops

California has gone furthest. The Delete Act requires data brokers to register annually with the California Privacy Protection Agency between January 1 and 31. Since January 1, 2026, residents have been able to use DROP to "submit one request to all active data brokers," and brokers are required to begin processing those requests on August 1, 2026. Penalties: $200 per day for failing to register, and $200 per day per consumer plus enforcement costs for failing to delete. The law's limits are stated on the state's consumer page: brokers need not delete public-record data, data protected by other laws such as HIPAA or FCRA, or information a consumer handed over directly. DROP helps only California residents - no federal law gives Americans a general right to demand deletion from data brokers. Some states attack the trade itself. Under New Jersey's Daniel's Law, which awards $1,000 per violation, the plaintiff Atlas Data Privacy has sued roughly 150 brokers, and in August 2026 a New Jersey court's default judgment stripped Radaris of 14 domains, according to KrebsOnSecurity. West Virginia's version was struck down in 2025, and a First Amendment challenge to Daniel's Law remains before the Third Circuit.

Who else is reading

The buyers are not only old classmates. Employers, landlords and dates look people up - so do stalkers, harassers and doxxers assembling a target's offline life. Yael Grauer, the Consumer Reports program manager who led the study, said these sites "pose a real danger by making it easier for stalkers or harassers to find and contact you," and the FTC guidance specifically flags the stakes for survivors of domestic violence and stalking. The overlap with this site's beat is direct: people-search sites are the legal front end of the aggregation trade that breach dumps serve illegally. Opting out of Spokeo does nothing about your records inside a leaked database, such as the alleged 70-million-record SCHUFA credit dump offered for sale on dark web forums, or inside stealer logs and combolists. None of this makes opt-outs pointless. It makes them maintenance:
  • Manual opt-outs outperform paid services, but they are a recurring chore, not a one-time cleanup.
  • Expect listings to reappear; calendar a re-check every few months instead of assuming a deletion held.
  • California residents can route requests through DROP; everyone else is left doing it site by site.
  • Opt-outs shrink the easy lookup surface. They do not erase public records, breach dumps or copies already sold.
Total erasure from the broker economy is not on offer - not from any service, and not yet from any law. What a disciplined routine buys is a smaller, slower target: fewer places where a stranger with your name can buy a map to your front door.

more notes

all news ›