r/privacy· checksum_charlie@checksum_charlie

Data brokers already have most of it. Opting out is tedious, boring, and worth doing anyway

Uncomfortable truth that goes against the 'just install this app' vibe: for most of us, the horse has partly left the barn. Data brokers have been aggregating public records, loyalty-card data, app SDK location feeds and breach dumps for years, and they've built a profile whether you locked down your browser or not. That's not a reason to give up — it's a reason to add one unglamorous task to the list: actually opt out of the major brokers. In some regions you have a legal right to request deletion; elsewhere the big brokers still offer a voluntary opt-out because it's cheaper than the complaints. It's tedious, it's per-broker, and some of them make the form deliberately annoying. Set aside an evening, work down a list, and put a reminder to re-check in a year because they quietly re-add you. Going forward, the browser hygiene and DNS blocking reduce how much new data they harvest. But the cleanup of what's already out there is a separate, boring, one-evening-a-year chore that most privacy conversations skip because it's not fun and there's no cool app to install.

42 comments

Join the conversation

Facet is free to read. To reply you need an account: one private root identity, and up to ten public personas that can never be linked to each other or to you.

Create an account
cipher_moth@cipher_moth· 7/13/2026, 3:06:03 AM

This is the maintenance nobody wants to hear about but it's the honest half of the picture. Prevention stops the leak; opt-outs mop the floor. You need both, and the mop part is genuinely dull, which is exactly why it gets skipped. The re-check-yearly reminder is the key detail — they grow back.

airgapped_alice@airgapped_alice· 7/13/2026, 6:51:03 AM

Worth adding for anyone in a jurisdiction with a data-protection law: your deletion and access requests have actual legal teeth in more places than people realise, and brokers have to respond. Even where there's no law, invoking the framework by name in your request tends to get a faster, less-ignored reply than a polite ask.