Guides · updated 2026-08-24
How do I opt out of data brokers myself, without paying anyone?
For most brokers, yes, and you should know how before paying. If you live in California one free state request covers the majority. Everywhere else it is one opt-out at a time, and four of the largest cannot be automated by anyone, including paid services.
Start with the free route, if it applies to you
California residents can submit one request through the state's DROP platform, and every registered broker must act on it. On 2026-08-25 we checked the 503 sources we track against the state registry: 398 of them are registered. That single free request is the largest single step available to anyone. How DROP works.
Doing the rest yourself
Every broker publishes an opt-out route somewhere, usually in the privacy policy footer. The pattern is nearly always: find your own listing, submit a removal form, then click a link they email you. The last step is why this cannot be fully automated for anyone, including paid services, unless they hold your mailbox.
Budget an evening for the largest twenty. Use an email address you can access easily, keep a note of what you submitted and when, and re-check in three months.
The four that no software can do
These are not obscure. They are among the largest holders of personal data, and each has made removal something only a person can complete. Any service claiming to automate them is either not doing it or not saying so.
LexisNexis Risk Solutions
Identity verification on their consumer portal, or the same form printed and posted. Read from the portal itself on 27 August 2026.
Acxiom
Multi-step identity verification. A single submitted form is rejected.
ZoomInfo
The opt-out sits behind email verification, so the confirmation link goes to you.
HubSpot, formerly Clearbit
Clearbit was acquired in November 2023 and the opt-out moved. Old instructions point at a dead address.
Why it comes back
Brokers rebuild their databases from public records, marketing lists and each other. Unless a legal suppression obligation applies, nothing stops a broker re-adding you the next time your name appears in a source they buy. Profiles commonly reappear within three to six months. This is the single most common complaint about paid removal services, and it is not their fault: they have no power to prevent it.
California's suppression list requirement is the first mechanism that actually addresses this, and it only binds registered brokers.
Whether to pay someone
Pay for repetition and for the parts you cannot reach, not for the broker list itself. If you are in California, a large part of that list is now free. What is genuinely hard to do alone is keeping it up over years, handling the confirmation emails, and dealing with the sites that are not brokers at all: profile aggregators, search results, and what AI models say when someone asks about you.
Cartograph is built around that split. Compared with the alternatives.
Common questions
- Is it really possible to do this myself?
- Yes, for most brokers. Every one publishes an opt-out route, usually linked from the privacy policy in the footer. The pattern is nearly always: find your own listing, submit a removal form, then click a link they email you. Allow an evening for the twenty largest.
- Which ones can nobody automate?
- LexisNexis Risk Solutions verifies your identity, online or by post, and the request has to come from you. Acxiom requires multi-step identity verification. ZoomInfo sends a confirmation link only you can click. HubSpot, which acquired Clearbit in November 2023, moved the opt-out so old instructions fail silently. Any service claiming to automate these is either not doing it or not saying so.
- Why does my data come back?
- Brokers rebuild from public records, marketing lists and each other. Unless a legal suppression obligation applies, nothing stops a broker re-adding you the next time your name appears in a source they buy. Profiles commonly reappear within three to six months.
- How do I stop it coming back?
- Only a suppression obligation does that reliably. California's platform requires registered brokers to keep one. Everywhere else the honest answer is repetition: re-check every few months and re-submit.
- Do I need to give them my address to be removed?
- Often yes, because they have to find your record to delete it, which is uncomfortable and legitimate to dislike. Give only what the form requires, use an email address you can access, and never send identity documents to a broker that has not explicitly asked for them under a documented process.
- Is a paid service worth it?
- Pay for repetition and for reach, not for the broker list itself. If you are in California a large part of that list is now free through the state platform. What is genuinely hard alone is keeping it up over years, handling confirmation emails, and dealing with sites that are not brokers at all.
- What about brokers outside the United States?
- In the EU and UK an Article 17 erasure request applies, with an Article 21 objection behind it, and they have one month to respond. That is a stronger instrument than a US opt-out, which in most states is voluntary.
- How do I know a removal actually happened?
- Check the page. A 404 is evidence. An email saying we have received your request is not a removal, and a service that records it as one is misleading you.
Sources
- California Privacy Protection Agency, data broker registry · read 24 August 2026
- auto-identity-remove, an open source opt-out runner, and its own STATUS.md on which brokers cannot be automated · read 24 August 2026
- CyberInsider, on removed data reappearing · read 24 August 2026
Every figure on this page is either taken from a source above on the date shown, or measured by Cartograph on 2026-08-24. If something here is out of date, write to support@usecartograph.com.