How to Remove Personal Data From Data Broker Websites: Free Opt-Outs and California DROP

Your name, address, phone number, age, and family connections may appear on people-search websites even if you never signed up for them. Many such services assemble information from public records, social profiles, and other data brokers.

This guide shows how to locate exposed records, request removal for free, use California’s new DROP system when eligible, and reduce the chances of the information returning.

Quick plan: identify exposed profiles → use each broker’s official opt-out page → save confirmation numbers → remove qualifying Google search results separately → check again periodically. Removing a search result is not the same as deleting the underlying record.

No service can promise to erase every trace of your information online.

What are data brokers and people-search websites?

A data broker gathers personal information and sells or shares it, often without having a direct relationship with the person described.

People-search sites are a visible subset: they publish or sell reports combining names, past addresses, phone numbers, relatives, and other details.

The Federal Trade Commission (FTC) explains that these reports can draw from public government records, social media, and other brokers.

Not every site displaying your name is a data broker. A government property-record database, an old social-media profile, a newspaper article, and a people-search report are different sources with different removal options.

Treating them as one problem leads to ineffective requests.

Where information appears | What you can request | What it does not automatically fix

People-search profile | Site-specific opt-out or suppression | Copies held by other brokers

Registered California data broker | DROP deletion request if eligible | Public records and exempt information

Google Search result | Removal of qualifying result from Google | Content still hosted by source site

Social media profile | Change privacy or delete content you control | Screenshots and copies elsewhere

Public government record | Correction or statutory confidentiality request if applicable | Not generally removable by broker opt-out

Step 1: find where your information is exposed

Use a private browser window if you prefer, and search for combinations of your full name, city, former city, phone number, or email address. Try alternate spellings and previous surnames if relevant.

Avoid typing highly sensitive identifiers such as a Social Security number into search engines or untrusted lookup tools.

• Search for your name in quotation marks with a city or state, such as "Jane Example" "Austin".

• Search for your phone number in quotes, using common formatting variants.

• Check people-search results for matching addresses or relatives; do not assume every same-name record belongs to you.

• Create a private tracking sheet with the site name, exact profile URL, date found, removal link, request date, and outcome.

• Prioritize records exposing a current home address, phone number, or information relevant to a safety concern.

Privacy precaution: do not post your full profile URLs or sensitive information in public comments asking for help. The search process itself can reveal details, so share only the minimum information a legitimate site needs to identify your record.

Step 2: submit free opt-out requests directly

The FTC describes two broad approaches: opt out manually for free, one site at a time, or hire a service to do some of the work. Manual removal is often practical if you have a small number of exposed profiles, but it can take time and repeated follow-up.

• Open the people-search website containing the correct record. Confirm it is the site’s genuine domain, not a paid lookalike.

• Look in the footer or privacy page for Opt Out, Do Not Sell or Share, Remove My Information, or a privacy request form.

• If you cannot find it, search the site’s name plus opt out or remove my information, and verify the result belongs to the site.

• Provide only the details required to match the correct record. A dedicated email address for privacy requests can help organize confirmations.

• Complete any email verification and save the request ID, confirmation email, or screenshot.

• Recheck the exact profile after the stated processing period. If still visible, follow up using the original request reference.

• Repeat for each distinct website and each duplicate profile; one broker’s deletion does not automatically remove other companies’ copies.

A sample opt-out request

Subject: Request to remove my personal informationHello Privacy Team,I am requesting removal or suppression of the people-search profile at [EXACT PROFILE URL] and that my personal information no longer be sold or displayed where applicable.

Please confirm the identity-verification steps required and notify me when the request is completed. Thank you.

This sample is a communication aid, not a guarantee of a legal right in every jurisdiction. Some companies require their own online forms rather than email.

Do not attach government ID documents unless the request is legitimate, necessary, and you understand how they will be protected.

Step 3: use California DROP if you are eligible

Important 2026 update: California’s Delete Request and Opt-out Platform (DROP) is a free government service for California residents. It launched for consumer requests in January 2026.

Registered data brokers were required to start processing requests in August 2026, and the system covers more than 600 active brokers according to the California Privacy Protection Agency. It is not a nationwide service for everyone in the United States.

• Visit the official California DROP consumer portal or start from privacy.ca.gov/DROP.

• Read the terms and verify California residency through the state’s identity-verification process.

• Create your DROP profile and provide accurate identifiers you choose to share, such as names, email addresses, phone numbers, ZIP codes, or other supported identifiers.

• Review which registered data brokers will receive your request and adjust the list only if you deliberately want to exclude a broker.

• Submit the request and securely save your eight-digit DROP ID; it is used to check status. Do not post it publicly.

• Return to the official portal to review status. Some requests may be marked deleted, exempted, opted-out, record not found, or pending.

The state says brokers must access DROP at least every 45 days after August 1, 2026; a consumer may wait up to about 90 days to see processing status.

A Deleted status applies to matching non-exempt data, not necessarily every public or first-party record about you. See the official explanation of status labels and timelines.

What information can DROP remove—and what stays?

Information category | DROP effect | Key limitation

Matching non-exempt broker data | Deletion required when matched | Exceptions and matching limitations apply

Data brokers collect later | Ongoing re-checks at least every 45 days | Only brokers covered by the system

Publicly available government records | Generally not erased by DROP | Request changes from record custodian if eligible

Data given directly to a business | Not automatically deleted by DROP | Use that company’s privacy rights process

Search engine snippets | May change after source updates | Separate search-result removal may be needed

Step 4: remove qualifying personal information from Google Search

Google provides a Results about you tool for finding and requesting removal of certain results containing personal contact information. Google also has policies for other sensitive information and doxxing scenarios.

These requests can reduce search visibility but do not remove the information from the website that hosts it.

• Open Google’s official Results about you experience while signed in, where available.

• Follow the prompts to add the personal contact details you want monitored and review the results Google identifies.

• For an eligible result, use the available removal-request option and follow the prompts.

• Review the request status and any policy explanation. If Google declines, use the site’s direct opt-out process and check whether another policy applies.

• If the source site removes or changes the page but Google still shows outdated content, use Google’s refresh outdated content guidance when appropriate.

Google’s removal policies depend on the type of information and context, and public-interest information may be treated differently.

A result disappearing from Google does not necessarily disappear from other search engines, direct links, cached copies, or public databases.

Step 5: use your state privacy rights where applicable

Privacy rights vary across U.S. states. Depending on where you live and the business involved, you may have rights to access, delete, correct, or opt out of certain sales or sharing of personal data.

These rights may have exemptions, verification requirements, and specific appeal processes. Check your state attorney general or privacy regulator’s official site for current rules rather than assuming California’s requirements apply everywhere.

For California consumers, the California Privacy Protection Agency explains CCPA rights and how to submit a privacy complaint.

A complaint is not a guaranteed personal remedy; regulators may use complaints to identify patterns and enforce the law.

Step 6: reduce new exposure at the source

• Review public social profiles for visible phone numbers, addresses, birthday details, and family connections.

• Remove unnecessary contact details from public business directories or personal websites you control.

• Use separate email addresses for public contact, shopping, and sensitive accounts where practical.

• Limit app permissions and review marketing/privacy settings for services that allow opt-outs.

• Use strong unique passwords and multi-factor authentication; data removal does not substitute for account security.

• If a public record exposes a protected address or safety-sensitive information, ask the record custodian whether a statutory confidentiality program applies.

Step 7: monitor for reappearance

The FTC warns that information can reappear on people-search sites when source records change, and it may still be exposed through relatives’ or associates’ reports. Recheck high-priority sites periodically and keep confirmation records.

You do not need to obsessively search every day; a repeatable checklist is more useful.

Timing | Suggested check | Action

Immediately | Search for exposed high-risk records | Submit first opt-outs and save evidence

After processing window | Revisit submitted profile URLs | Follow up if the listing remains

Every 2–3 months | Search name, phone, and address variants | Opt out of new or republished listings

After moving or changing numbers | Check newly public records and listings | Update requests and privacy settings

After a stalking or impersonation incident | Review safety-critical exposures | Consider specialized support and reporting

Free DIY removal versus paid removal services

Paid services may save time by submitting requests to many sites and monitoring reappearances. But their coverage, renewal terms, data collection, and success reporting vary.

Some services do not cover all brokers, and they cannot erase public records or guarantee complete deletion. The FTC recommends checking what sites a service covers, whether it provides proof of submissions, and how often it rechecks records.

Factor | Manual opt-outs | Paid service

Direct cost | Usually free | Subscription or one-time fee

Time investment | You handle each request | Service handles some requests

Coverage | Sites you identify | Only sites covered by provider

Privacy trade-off | Share verification data with each broker as needed | May share information with service too

Guarantee of total removal | No | No

Ongoing checks | Your responsibility | Depends on plan and provider

What if a broker refuses to remove your information?

• Check whether you submitted to the correct company and completed required verification.

• Read the company’s privacy notice for its reason, exemptions, and appeal or contact process.

• Save the exact request, dates, screenshots, and response without publishing sensitive information.

• If you have applicable state rights, use the regulator or attorney general’s official complaint process.

• For threats, stalking, extortion, or identity theft, prioritize safety and relevant reporting channels rather than waiting for an opt-out.

Common mistakes that make data removal harder

• Confusing delisting with deletion: removing a Google result does not delete the source profile.

• Sending excessive identity documents: share only what is necessary with a verified recipient.

• Paying a fake removal website: check the real broker domain and official state resources.

• Ignoring duplicate profiles: different name variants or old addresses can produce separate records.

• Assuming a one-time fix: data may return as brokers refresh their sources.

• Assuming all data is legally deletable: public records and legally exempt records can remain.

Privacy removal checklist

• List the highest-risk exposed profiles and exact URLs.

• Use each site’s official free opt-out method.

• Submit DROP if you are a verified California resident.

• Request eligible Google Search removals separately.

• Record confirmation emails, IDs, and dates.

• Check source pages and search results after processing.

• Revisit the highest-priority sites periodically.

Final takeaway

Removing your data from broker websites is usually a process, not a single button. Start with free, verified opt-out forms; use California DROP if you qualify; treat Google removal as a separate search-visibility step; and monitor the records that matter most.

This approach reduces exposure without making the misleading promise that every public record or copied dataset can be erased.

Official sources and further reading

FTC: What to know about people-search sites

California DROP official overview

California DROP: How it works and status codes

California DROP consumer portal

California data broker registry

Google Results about you

Google: Refresh outdated content