In today’s hyper-connected world, it’s easier than ever for your personal information, like your name, address, phone number, and even your age to end up online. It’s often collected from public records, various databases, online shopping sites, and social media profiles. Some data providers even collect mentions about you on blogs or forums. However it is collected, your data is often just a few clicks away from anyone who wants to find it. Unfortunately, once your personal information is out there, it’ll be collected and sold by data collection companies. Worse, it can be used by nefarious actors for identity theft, phishing scams, and other cybercrimes. Don’t panic. There are several things you can do to protect yourself.
Here’s a practical guide on how you can gain control over your personal data and make it harder for scammers and spammers to misuse your information.
Step 1: Start with Google
Google is the most popular search tool on the Internet, and it’s often the first place people turn to when looking for information about others. If you find personal information about you in Google search results, there’s a simple way to request its removal.
-
Find the result containing your information: Search your name and other personal details to see what comes up.
-
Click the three dots next to the URL of the offending search result.
-
Choose “Remove Result”: Follow the prompts to fill out a request form. Once submitted, Google will review the request, and if approved, the link should disappear from search results within a few days.
It’s important to note, though, that removing a result from Google doesn’t delete the actual content from the internet. The webpage hosting the information remains live. You’re only making it less visible via Google’s search engine. To truly remove the data, you’ll need to contact the source website directly.
Also Check Google’s “Results About You”
For even better ongoing protection, Google now offers a free feature called Results About You. By signing up, Google will monitor search results for your personal contact information and alert you whenever it appears. From there, you can request removal with just a click.
Step 2: DIY Data Broker Removal
If you’re motivated and willing to put in some work, doing it yourself is often the most effective, and certainly the most cost-efficient option. However, it can take quite a bit of time going from site-to-site to request the removal of your information. Several sites also require a double-opt-out, which means they’ll email you for additional information or verification of the removal – so don’t use a fake email address when opting out. Here’s how to start:
-
Search for Yourself: Type your full name into Google (and maybe include your city or employer for better targeting).
-
Identify the Data Broker Sites: Many of the top results will be people-search sites like Spokeo, Whitepages, MyLife, or BeenVerified.
-
Submit Opt-Out Requests: Visit each site individually and follow their opt-out procedures. Some require creating an account; others need just an email verification.
-
Use Directories for Help: Luckily, you’re not alone in this quest. Serveral services offer free opt-out guides that walk you through the removal process for dozens of data brokers. Their step-by-step instructions are a lifesaver if you’re navigating this landscape for the first time:
BONUS STEP 2: IF YOU LIVE IN CALIFORNIA
If you live in California, the Delete Act has changed the game. As of January 1, 2026, the state launched the Delete Request and Opt-Out Platform (DROP). What you can do with DROP:
-
One Request, 500+ Brokers: Instead of contacting companies one-by-one, you can submit a single request through the official DROP portal.
-
How to Use It: You must verify your California residency (using Login.gov or the California Identity Gateway). Once verified, you can provide identifiers like your name, previous addresses, and even “pseudonymous identifiers” like your Mobile Advertising ID or VIN, which helps brokers find and delete your data more accurately.
-
Compliance: Registered data brokers are legally required to process these requests at least every 45 days starting in August 2026.
Privacy Rights in Other States
California isn’t the only state with strong protections. If you live in one of the following states, you have specific legal rights to control your data:
-
Virginia (VCDPA): Residents can request to access, correct, and delete their data, and opt-out of targeted advertising and data sales.
-
Colorado (CPA) & Connecticut (CTDPA): These states offer some of the strongest rights, including the right to opt-out of “profiling” (automated decisions made about you) and a requirement for businesses to honor universal opt-out signals like GPC.
-
Utah (UCPA): Provides the right to delete data, but generally only for information you provided directly to the business.
-
New York: While the more comprehensive New York Privacy Act continues to move through the legislature, residents are currently protected by the Personal Privacy Protection Law (PPPL) regarding data held by state agencies, and the RAISE Act for transparency in how AI models use your data.
Step 3: Subscribe to Data Removal Services
If you’ve tried to opt out using the DIY or manual method, then you know how tedious and time consuming it can be. So, as the process becomes more challenging and concerns about digital privacy grow, so has the market for data deletion services. While these options often aren’t free, these companies promise to scrub your personal information from the internet for you and will work to have your name and information removed from large data providers that sell your information. Here are credible options, with what they’re good at:
Incogni (The Automator)
Incogni, owned by Surfshark, is built for efficiency. It uses legal frameworks (like GDPR and CCPA) to send waves of automated requests. It is particularly strong at tackling “private” marketing brokers that don’t have public-facing search pages. Its suppression list feature is a standout, actively telling brokers not to re-add you once you’ve been removed.
Optery (The Evidence-Seeker)
Optery is widely considered the most transparent. Even their free tier is useful because it provides an “Exposure Report” showing you exactly where you are listed. At higher tiers, they use a “Humans + Machines” approach. The inclusion of before-and-after screenshots is their “killer feature,” giving you visual proof that a listing is truly gone.
PrivacyHawk (The Corporate Footprint Specialist)
PrivacyHawk goes beyond standard data brokers by targeting the corporate databases of thousands of companies you’ve interacted with (retailers, apps, etc.). By scanning your inbox (with permission), it identifies which companies have your data and sends automated “Delete” or “Do Not Sell” requests to reduce your risk in future data breaches. It also features a “Privacy Score” (300-850) that tracks your progress, similar to a credit score.
DeleteMe (The Human Touch)
As one of the oldest players, DeleteMe relies heavily on human privacy experts. While AI handles the bulk, people actually call or email brokers to ensure tricky removals are completed. It covers a vast number of sites (750+) and is excellent if you have a complex digital footprint that requires more than just an automated script.
OneRep (The Family Value)
OneRep is built for “set-it-and-forget-it” users. It focuses heavily on the most visible “People Search” sites (like WhitePages or Spokeo). Its dashboard is very user-friendly, and it offers one of the most affordable family plans, covering up to six people for a lower price point than many premium competitors.
These services typically offer to automate the tedious opt-out process across dozens, sometimes hundreds, of data broker websites. Still, outsourcing your privacy cleanup to a third party doesn’t guarantee complete removal. For individuals concerned about privacy but wary of ongoing costs, there’s a strong case for taking matters into your own hands.
Step 4: Stop Companies from Sharing Your Information
Unfortunately, many companies profit by selling your personal information to third-party partners, often without your explicit consent. Third-party data sharing usually involves companies sharing your information with external vendors or partners for purposes like marketing, payment processing, or IT management. Examples include:
- Cell Phone Providers: Unless you have opted out, cell phone providers often sell your personal data to third-party companies for purposes such as targeted advertising or analytics. This data can include sensitive information like your location, web activity, app usage, and even demographic details such as age and ZIP code. While providers claim to anonymize the data, studies have shown that it’s relatively easy to re-identify individuals from such datasets. See how you can start protecting your data to prevent being tracked by advertisers and the government.
-
Internet Service Providers: They can legally sell your browsing history, app usage, location information, demographic details and other personal data to third parties, such as advertisers and data brokers. Since a 2017 U.S. law rolled back FCC privacy protections, ISPs have been allowed to monetize this information, often without clear or transparent consent from users.
-
Healthcare Data: Sharing electronic health records with external vendors requires compliance with HIPAA standards to protect sensitive health information. However, the Change Healthcare breach last year revealed that third parties don’t always do a good job of managing the data they are entrusted with.
-
Credit card and payment card companies: These providers can sell your transaction data to third-party companies for purposes like targeted advertising or predictive consumer behavior modeling. This data includes details such as where and when you shop, how much you spend, and even the frequency of purchases. Providers often aggregate and anonymize this data, but it can still be used to create detailed profiles or “audiences” for marketing, exposing consumers to privacy risks and potential misuse.
Even your smart TV is enabled to track your usage and sell it to third parties! These practices raise concerns about privacy and data security. To help you regain control over your data:
Locate the Opt-Out Mechanism: Most companies are required to provide a clear and conspicuous way for consumers to opt out of data sharing. When you log into your account, search for links labeled “Do Not Sell My Personal Information” or “Privacy Choices” on their website or app. However, some companies require you to manually submit opt-out requests through forms, email, or account settings. The website SimpleOptOut.com can help you find how to opt out of data sharing by companies you do business with. After opting out, ensure you receive confirmation from the company. Some organizations suppress rather than delete your data, so periodic monitoring is necessary to ensure compliance.
Opt-Out Tools for Online Advertising
-
-
Google Analytics Opt-out Browser Add-on: This free tool prevents Google Analytics from tracking your activity on websites. It works across major browsers like Chrome, Firefox, Safari, and Edge. By installing this add-on, you can ensure that your visits aren’t included in analytics reports, keeping your behavior private.
-
Amazon Ad Privacy Choices: Amazon allows users to opt out of personalized advertising based on cross-context behavioral tracking. You can adjust these settings through the Amazon app or website to prevent the use of your data for targeted ads outside Amazon’s platform.
- Facebook Data Sharing: Social media companies are among the most prolific sharers of personal information across the internet. Here’s how you can tell Facebook what data you do and don’t want to share.
-
Manage Your Expectations
It’s important to approach this task with realistic expectations. Removing personal information from the internet is often described as a game of “Whack-a-Mole.” As soon as you take down one listing, another pops up elsewhere. Data brokers continuously scrape and update databases. Public records like property ownership, voter registration, and professional licenses may resurface online through different channels. Still, every removal you complete makes it harder for bad actors to easily assemble a full profile on you. In the world of cybersecurity, raising the “cost” (in time and effort) for someone trying to misuse your information is a powerful defensive strategy.
The best long-term strategy for protecting your personal data is to think twice before sharing.
-
Limit what you post on social media: Avoid sharing addresses, birthdays, phone numbers, and even travel plans publicly.
-
Review privacy settings on platforms like Facebook, Instagram, LinkedIn, and X (formerly Twitter).
-
Opt out of data collection where possible when signing up for services or websites.
-
Use aliases or minimal information when it’s not necessary to provide real details.
Even though it can feel overwhelming to realize how much personal information is floating around the internet, it’s empowering to know there are steps you can take to protect yourself. Digital minimalism isn’t just about keeping a low profile — it’s about controlling your online narrative and protecting your future self. While you may not be able to erase your digital footprint entirely, every piece of information you remove makes a difference.
| Listen to this as a Podcast |







