Most people assume their biggest privacy threats come from hackers or governments. But one of the most pervasive forms of surveillance is run by neither — it's managed by data brokers. These are private companies whose entire business revolves around collecting, packaging, and selling your personal information to advertisers, insurers, employers, and law enforcement agencies.
A 2024 U.S. Senate investigation described the industry as "massive, opaque, and virtually unregulated." Data brokers track your online activity, purchases, travel patterns, relationships, and in some cases medical and financial data. You've probably never heard of most of them — but they almost certainly have a file on you.
How One Company Sold Your Location to the Highest Bidder
In 2023, the Federal Trade Commission took action against data broker Kochava Inc. for selling precise location data that could reveal visits to sensitive locations — medical clinics, places of worship, domestic violence shelters, and addiction treatment centers. The company marketed real-time data feeds that allowed buyers to map consumer movements in fine detail.
The FTC alleged that these datasets could easily identify individuals, creating risks of discrimination, stigma, and physical harm. In other words: your digital shadow can expose your most private moments to anyone willing to pay for them.
How Data Brokers Get Your Information
Data brokers don't hack — they harvest. They rely on what you give away freely through everyday activity. When you accept cookie banners, install apps, use loyalty cards, or fill out online forms, you feed a network of trackers that build a behavioral profile over time.
According to the Electronic Privacy Information Center (EPIC), some brokers hold thousands of data points per person — browsing history, income estimates, interests, home address, and more. They sell that data to marketers, political campaigns, and data enrichment firms that merge it with public records to create detailed personal dossiers.
The Government Buys From Brokers Too
Here's the part most people don't know: government agencies regularly purchase data directly from brokers to bypass warrant requirements. The Department of Homeland Security and the IRS have both been reported to have bought bulk location and personal data for investigations — using the commercial data market as a workaround for judicial oversight.
That means your digital footprint isn't just a marketing asset — it's potentially actionable by law enforcement without a court ever being involved.
What You Can Do
- Opt out of major data brokers using resources like privacyrights.org
- Delete or deactivate old accounts — each login or saved preference adds another data point
- Reject cookie tracking when possible and use privacy-focused browsers
- Avoid discussing sensitive matters over platforms that store metadata
You can't undo your past digital footprint overnight. But you can stop feeding it. And you can choose communication tools designed not to generate the kind of data that brokers buy and sell.
The data broker blind spot: Most people focus on who they talk to, not where their metadata goes afterward. A communication platform that retains logs of who contacted whom, and when, is generating exactly the kind of behavioral data that brokers value most. Platforms that don't retain this data can't sell it — or hand it over.