How a public profile ends up in a people-search listing

Finding yourself listed on a people-search site — full name, age, past addresses, relatives — is unsettling, and the natural assumption is that something was breached. Usually nothing was. The FTC’s description of how these sites work is a description of assembly, not theft: they compile public records, buy from other data brokers, and "collect information from social media profiles that are public or viewable by everyone." Understanding the pipeline changes what you can usefully do about it.

Where the data actually comes from

Three streams feed a people-search listing, and only one of them involves you doing anything.

The first is public records. The FTC’s list is specific: property records, driving records, voter registration information, criminal records, civil actions and judgments, and birth, marriage, divorce and death records. These are public by law. You did not consent to their commercial use and you cannot withdraw them.

The second is trade between brokers. The FTC notes they may buy information from other data brokers, which is why removing yourself from one site does nothing about the next.

The third is your own public posting. Profiles that are public or viewable by everyone are harvested directly. This is the only stream you control at source.

What gives it away that you are listed

• Your name, age and current or former street appearing in a search-engine result you did not create.
• Cold contact that references a specific relative or a previous address — the relative-linkage in these reports is one of their selling points.
• A profile page that offers to show "full report" details behind a payment, populated with data that is broadly right but a few years stale. Staleness is a tell that the source was records rather than a live account.
• The same profile appearing across several differently-branded sites with the same errors in it, which is what broker-to-broker trade looks like from the outside.

Opting out, and why it does not stay done

The FTC’s guidance is that you can do this yourself: "do it on your own, one by one, for free." Each site has its own removal process and its own delay.

Set expectations properly before you start, because the FTC does not oversell it. Information "could re-appear for sale on people search sites" if the underlying public records change — a house move, a court filing, a marriage. Your details "may still appear in the reports of your relatives, neighbors, or associates", so a report about someone else can still show your address. And opting out "doesn’t delete your information from public records", which is where most of it came from.

The FTC’s conclusion is not that opting out is pointless. It is that it is maintenance: "Periodically check the people search sites."

If you are considering paying someone to do it

The FTC does not tell you not to. It tells you what to establish first, and the three questions are worth quoting because they are the ones the sales page will not answer: how many websites the service covers, whether it provides a report about the sites it has opted you out of, and how often it will rescan those sites.

A service that cannot answer all three is selling the feeling of the thing. And no service, paid or free, changes the public-records stream.

Tightening the source rather than chasing the copies

1. Set your social profiles so they are not public or viewable by everyone. This closes the one input stream you own.
2. Strip the matching keys from public profiles — birth date, home town, employer, phone number. These are what let a broker join records to a person.
3. Turn off search-engine indexing of your profiles where the platform offers it.
4. Disable the advertising identifier on your devices. CISA pairs this directly with making deletion requests to data brokers and other online platforms.
5. Opt out of prescreened credit and insurance offers. It is free, it is a separate control from anything above, and it reduces the mailed pre-approvals that get intercepted.

Where to take it if it becomes more than annoying

Deceptive data practices and unwanted collection can be reported to the FTC at ReportFraud.ftc.gov. If information in a listing has been used to open accounts or take money, that is identity theft and the route is IdentityTheft.gov, which produces a personalised recovery plan, tracks progress, and prints pre-filled letters to credit bureaus, businesses and debt collectors.

If it has escalated into harassment or stalking, the FTC’s privacy hub has a category for online abuse and harassment, including stalkerware and non-consensual intimate images, which is the right starting point rather than a general privacy article.

Sources: FTC — What to know about people search sites · CISA — Best practices against tracking technologies and spyware · FTC — Protecting your privacy online (hub) · FTC — IdentityTheft.gov · FTC — What to know about prescreened offers

Reviewed 27 August 2026 by the CyberArtical editorial team against primary guidance from the FTC and CISA. Security guidance changes over time; where our earlier version of this page said something different, we say so in the article rather than editing it out quietly.