I once searched for an old address online and found a people-search site listing places I had lived, possible relatives and an age range.

Some details were wrong.

Enough were right to make me uncomfortable.

I had never created an account on the site. I had never uploaded a profile. Nobody had asked me to fill in a form.

The information had been assembled.

That is the part of digital privacy people often miss. You do not have to give one company your entire life story. Different companies can collect small pieces, combine them and sell access to the result.

The businesses doing this are usually called data brokers.

Most people will never knowingly interact with one.

The broker may know them anyway.

The data comes from ordinary life

Data brokers collect information from many sources.

Public records. Marketing databases. Purchase information. App activity. Loyalty programs. Location data. Surveys. Online behaviour. Records sold or shared by other companies.

The exact mix depends on the broker and local law.

Individually, each source may seem boring.

A change of address. A vehicle registration. An interest category. A list suggesting someone recently shopped for baby products.

Combine enough pieces and the profile becomes much more revealing.

This is why the phrase “I have nothing to hide” has always felt beside the point.

Privacy is not only about secrets.

It is about who gets to assemble a picture and what they are allowed to do with it.

Advertising is the friendly use case

Data brokerage is often explained through targeted advertising.

A company wants to reach people likely to buy running shoes. A marketing platform provides an audience based on behaviour and interests.

That can be mildly useful. Seeing relevant ads is not the worst thing technology has done.

The same profiling machinery can support less comfortable decisions.

Data may help assess fraud risk, locate people, screen potential customers or build detailed identity profiles. Some data sets can be used by political campaigns, investigators or others trying to influence or find individuals.

The category is broad.

That is part of the problem.

Consumers rarely know which version they are participating in.

Location data changes the mood

Location information feels different because movement reveals routine.

Where someone sleeps. Where they work. Which clinic they visit. Which religious service they attend. Which political event they joined. Whether they spend evenings at a particular address.

A single location point says little.

Weeks of location points can become intimate.

Many apps have legitimate reasons to request location. Maps obviously need it. Food delivery works better when the app knows where you are. Weather can use approximate location.

The trouble begins when precise location becomes a reusable commercial data stream far beyond the original feature.

I now give apps approximate location when exact coordinates are unnecessary.

The coffee shop does not need centimetre-level knowledge of my life.

Opting out is intentionally tiring

Some data brokers provide opt-out processes.

They may require identity verification, forms and repeated requests. Data can also reappear later if the broker receives updated records.

There are services that submit removal requests on behalf of users, usually for a subscription.

This creates a strange economy.

Companies collect personal information most people never asked them to collect, then another company charges the person to remove it.

Very efficient.

Even with opt-outs, complete removal is difficult because the industry is large and information flows between sources.

I still think removal requests can be worthwhile for people exposed to harassment, stalking or identity risk.

Reducing visibility is not the same as disappearing.

Reduction still matters.

Public information can create private consequences

People sometimes respond to data-broker concerns by saying the information is public.

Some of it is.

There is a difference between a record technically being available at a courthouse or government database and that record being indexed, combined and delivered in seconds to anyone with a credit card.

Searchability changes practical privacy.

The friction of finding information used to protect people accidentally.

Technology removed much of that friction.

We should not confuse “public somewhere” with “should be effortless to profile at scale.”

The law has not always caught up to that distinction.

Apps deserve more suspicion at installation

People cannot control every downstream data market.

They can reduce some inputs.

When an app asks for contacts, location, microphone access or other sensitive permissions, ask whether the feature genuinely needs them.

Rejecting unnecessary access is not paranoia.

It is data minimisation.

Also check advertising identifiers and tracking settings on phones. Modern mobile systems provide more controls than they once did.

These controls will not erase public records or stop every broker.

They reduce the constant stream of behavioural information leaving the device.

Perfect privacy is unrealistic.

Smaller footprints are realistic.

Companies should know which brokers they use

Businesses buy data too.

Sales teams purchase lead lists. Marketing departments use audience data. Fraud systems rely on external signals. Background screening may involve third-party information providers.

That creates responsibility.

Where did the data come from? Was it collected lawfully? Can individuals correct errors? Is the information appropriate for the decision being made?

A cheap data set can create expensive compliance problems.

It can also create unfair outcomes when the underlying records are wrong.

Remember the people-search profile I found?

Several details were incorrect.

Imagine that quality being used for a serious decision rather than curiosity.

Privacy laws are making the industry more visible

Different jurisdictions are introducing or strengthening privacy rules that give people rights around access, deletion, correction and data sale.

The details vary widely.

What matters for ordinary users is that data brokerage is becoming a policy issue rather than an invisible marketing practice.

Regulators are asking harder questions about sensitive information, especially precise location and health-related data.

This will not end the industry.

Data has commercial value.

But it may change which kinds of data can be traded casually and how clearly companies must explain the practice.

Transparency is a low bar.

We have not always reached it.

Search your own name once

I do not recommend becoming obsessed with online self-searching.

That is a fast route to a strange afternoon.

But occasionally searching your name, phone number or old address can reveal how exposed your information is.

You may find people-search sites, old profiles or forgotten accounts. Remove what you can. Lock down what you still use. Ask for deletion where the process exists.

Then move on.

Privacy work can become endless because the internet is endless.

The goal is not to achieve invisibility.

It is to make the easy profile slightly harder to build.

I still know that data broker has information about me.

It knows a little less now.