Our Methodology

How we research data brokers, document opt-out procedures, and build tools for privacy protection.

Data Broker Research

PrivacyFix researches data brokers through direct examination of their public-facing websites, privacy policies, and opt-out procedures. Our broker profiles are built from:

  • Direct website review: We visit each data broker's site to document what data types they collect, sell, or display.
  • Opt-out testing: We test opt-out procedures for difficulty, time required, and effectiveness.
  • Privacy policy analysis: We review each broker's privacy policy to understand data sources, use cases, and consumer rights.
  • State regulatory filings: For states with data broker registration requirements (Vermont, California, Texas), we reference official registries.
  • Consumer reports: We track publicly reported experiences from privacy advocates, journalists, and researchers.

Difficulty Ratings

Each broker's opt-out difficulty is rated on a 1–5 scale based on:

  • Process complexity: Number of steps required, account creation requirements, form complexity.
  • Verification burden: Whether the broker requires email verification, identity verification, or physical mail.
  • Time investment: Estimated minutes to complete a single opt-out.
  • Re-opt-out frequency: How often the opt-out must be renewed (some brokers re-populate removed records).

Privacy Audit Tool

The Privacy Audit questionnaire creates a personalized action plan by asking about your public profile size, the sensitivity of your information, and your threat model. The recommendations are based on documented opt-out effectiveness for each data broker category and the estimated effort-to-impact ratio for different actions.

No personal information entered into the audit is stored or transmitted. All processing happens in your browser.

Opt-Out Tracker

The Opt-Out Tracker stores your progress data locally in your browser using localStorage. No account is required. Your tracker data never leaves your device.

State Rights Database

State privacy rights information is researched from enacted state legislation (CCPA/CPRA, VCDPA, CPA, etc.) and state attorney general guidance documents. We update this database when new state laws take effect or when significant amendments are enacted.

Research Methodology

Our broker research follows a structured process. For each data broker, a researcher visits the broker's public-facing website to document what data categories they collect and sell, then navigates the opt-out process to document each step, time required, and any verification barriers. Privacy policies are read in full to identify data sources, sharing practices, and consumer rights disclosures. For brokers operating in states with registration requirements (Vermont's Act 171, California's Delete Act), we cross-reference official state registries to verify the broker's registration status and any disclosed data categories. This multi-source approach produces profiles that reflect real consumer experience rather than marketing claims.

Update Schedule

We review and update broker profiles on a rolling basis. High-profile brokers and those with frequently changing opt-out procedures are reviewed more often. State privacy rights information is updated when new state laws take effect or when significant amendments are enacted. Each broker profile and state rights entry includes a "last verified" date so users can assess data freshness.

Limitations

  • Data broker opt-out procedures change frequently — guides may become outdated between update cycles.
  • Effectiveness of opt-outs varies — some brokers reliably honor removals, others re-populate records from other sources.
  • New data brokers emerge constantly — our coverage of 750+ brokers is comprehensive but not exhaustive.
  • State privacy laws evolve rapidly — verify current law with official state sources for legal purposes.
  • Difficulty ratings are subjective assessments based on our testing experience; individual experiences may vary.

Editorial Workflow

Content on PrivacyFix is compiled by our editorial team from official source data. Structured data (broker registries, state statute references, opt-out step counts, FTC enforcement case IDs) is ingested and normalized programmatically; narrative framing, opt-out walkthroughs, guide text, and rankings commentary are drafted by our editorial team and reviewed line-by-line at Kiznis Studio before publication. We follow Google Search Central guidance (Danny Sullivan, February 2023; reaffirmed 2024) on disclosed editorial workflow. No page on PrivacyFix is published without human review. We do not accept payment from any data broker, privacy service, VPN provider, or other covered entity for coverage, placement, or rankings — "difficulty" ratings and service comparisons are computed from our own opt-out testing and public documentation.

Not Affiliated

PrivacyFix is not affiliated with any data broker, privacy service provider, state attorney general's office, or government agency. We are an independent privacy education and tools portal.

Frequently Asked Questions

Where does PrivacyFix's data broker information come from?

Each broker profile is built from firsthand research: a member of our team visits the broker's public-facing site, walks through the opt-out process end-to-end, and documents every step, verification requirement, and time delay. Where states maintain official data broker registries (Vermont Act 171, California's Delete Act registry), we cross-reference the broker's registered status, data categories, and opt-out contact of record. FTC enforcement actions and state attorney general privacy settlements are pulled from the agencies' public case databases.

How often are opt-out guides updated?

Data brokers change their opt-out processes frequently — sometimes within weeks. We review high-profile brokers (Spokeo, Whitepages, BeenVerified, Intelius, MyLife, Radaris, TruePeopleSearch, FastPeopleSearch, USPhonebook, PeopleFinders) on a rolling basis and re-verify steps whenever a reader reports a broken procedure. Each guide includes a "last verified" date; if a broker has revised their flow since then, the underlying logic of the guide still applies but the exact button labels may differ.

Does PrivacyFix earn money when I use a paid privacy service?

Some links to paid privacy services (DeleteMe, Incogni, Optery, etc.) are affiliate links, which means PrivacyFix may receive a commission if you subscribe — at no additional cost to you. Affiliate relationships do not influence which services we cover, how we rate them, or whether we recommend DIY over paid. Our default recommendation across the site is the free DIY path; paid services are presented as an alternative for users who prefer to outsource the work.

Is PrivacyFix legal advice?

No. PrivacyFix explains how U.S. state privacy rights work (CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, and newer state laws) and documents procedures for exercising those rights, but we are not attorneys and PrivacyFix does not provide legal advice. For legal questions — particularly around deceased-relative records, business-purpose data sales, or disputes with a data broker that refuses an opt-out — consult a licensed attorney in your state or contact your state attorney general's privacy unit.