What Is a Data Broker?
Data brokers are companies whose entire business model revolves around you — or more accurately, your information. They collect massive amounts of personal data from dozens of sources, organize it into detailed profiles, and sell that information to marketers, insurers, employers, law enforcement, and anyone else willing to pay.
You never signed up with these companies. You never agreed to their terms. Yet they likely have a file on you right now.
How Data Brokers Work
Data brokers pull information from a surprisingly wide range of sources:
- Public records — court documents, property records, voter registrations, marriage and divorce filings
- Social media profiles — your posts, likes, check-ins, and listed personal details
- Loyalty programs and retail purchases — every swipe of a rewards card builds a purchase history
- Web tracking — cookies, pixels, and third-party trackers follow you across websites
- Mobile apps — many free apps sell location data and behavioral data to brokers
- Other data brokers — yes, they buy from each other too
Once collected, this raw data gets cleaned, matched, and combined into consumer profiles. A single profile might include your full name, home address, phone number, email addresses, estimated income, political affiliation, health interests, shopping habits, and physical location history.
These profiles are then licensed or sold outright to clients. Some brokers focus on marketing audiences. Others specialize in background checks, risk scoring for insurers, or people-search websites that let anyone look you up by name.
Why This Matters for VPN Users
Many people turn to a VPN to protect their online privacy, and that's a smart move — but it's worth understanding exactly what a VPN does and doesn't do here.
A VPN hides your IP address and encrypts your internet traffic, which prevents your ISP and network-level observers from tracking your browsing activity. This directly cuts off one of the data pipelines brokers rely on — the behavioral tracking tied to your IP address.
However, a VPN alone won't erase data that brokers have already collected, and it won't stop tracking that happens through your logged-in accounts, cookies, or device fingerprinting. If you visit a website while signed into Google, that browsing activity is still tied to your identity — VPN or not.
Combining a VPN with other privacy tools gives you stronger protection: use a browser that blocks trackers, avoid logging into accounts unnecessarily, and consider periodically opting out of data broker databases (more on that below).
Practical Examples
Marketing targeting: A retailer buys a list of households with young children and high disposable income to target with diaper and toy ads. Your profile may be on that list based on purchase history you didn't know was being sold.
People-search sites: Sites like Spokeo, Whitepages, or BeenVerified are data broker products. Anyone can search your name and find your address, relatives, phone number, and more — often for just a few dollars.
Insurance and employment: Some insurers use data broker information to assess risk before offering quotes. Employers may run background checks through broker-powered services.
Location data sales: Several brokers specialize in selling precise GPS location data harvested from smartphone apps. This data has been used to track visits to specific locations — including medical clinics and places of worship.
What You Can Do
Opting out is tedious but possible. Major brokers like Acxiom, Spokeo, and LexisNexis offer opt-out forms. Services like DeleteMe or Privacy Bee automate this process for a subscription fee.
At the network level, using a reputable VPN with a solid no-log policy removes your IP-based browsing data from the equation. It won't undo existing profiles, but it limits the fresh data being fed into them going forward.