You have never heard of most of the companies that know the most about you. Beyond the familiar names, Google, Meta, your bank, operates a shadow industry of thousands of firms whose business is buying, aggregating and selling personal information about ordinary people. Data brokers compile your age, address, income bracket, health interests, shopping habits and political leanings into profiles sold to advertisers, insurers, employers and sometimes anyone with a credit card. It is a multi-billion-dollar market built on data you never knowingly gave to the companies profiting from it. Here is how data brokering works and what you can do about it.

What is a data broker?

A data broker is a company that collects personal information from many sources and sells it, either as raw lists or as scored profiles. Unlike Google or your bank, brokers typically have no direct relationship with you; you never signed up, never clicked agree, never even visited their website. They buy purchase histories from retailers, scrape public records like voter rolls and property registrations, harvest data from apps via software development kits, and purchase location trails from apps that quietly sell them. They then stitch these fragments into remarkably detailed portraits: not just who you are, but what you are likely to do next, from buying a car to developing a health condition. Their customers include marketers, insurers, banks, political campaigns, and, disturbingly, anyone willing to pay for “people search” sites.

How do brokers get your data?

The supply chains are varied and mostly invisible.

• App SDKs: free apps embed third-party code that silently transmits location, device identifiers and usage data to brokers.
• Retail and loyalty programmes: purchase histories are aggregated and sold, stripped of names but rich in behavioural detail.
• Public records: voter registrations, court records, property deeds and business filings are harvested at scale.
• Web tracking: cookies, pixels and fingerprinting follow you across sites, feeding browsing profiles.
• Data breaches and leaks: stolen databases circulate and get laundered into “legitimate” broker datasets.
• Surveys, warranties and contests: the fine print often permits sharing your details with “marketing partners”.

Each source seems harmless alone; combined, they reconstruct your life with startling fidelity.

Who buys brokered data, and why?

Marketing is the biggest buyer: targeted advertising runs on broker segments like “new parents”, “likely car buyers” or “high-income diabetics”. Insurers and lenders buy risk scores derived from broker data, raising uncomfortable questions about fairness. Employers run background checks built on broker dossiers. Political campaigns micro-target voters with brokered profiles. Law enforcement agencies in some countries buy location data from brokers to sidestep warrant requirements, a practice that has drawn legislative fire. And people-search sites sell your address and phone number to anyone, a gift to stalkers, scammers and harassers. The common thread: decisions about you get made from data you never provided to the decision-maker.

What are the real harms?

Data brokering enables concrete harms, not just creepy ads. Scammers buy “sucker lists” of vulnerable people, the elderly, the indebted, and target them precisely. Domestic abusers locate victims through people-search sites. Discriminatory pricing and risk scoring can quietly charge some groups more or deny them opportunities, with algorithms laundering the bias. Breaches at brokers expose millions at once; several major brokers have been hacked. And the profiles are often wrong: mistaken identity in broker data has cost people jobs, housing and credit, with Kafkaesque dispute processes. The industry’s defence, that the data is “public” or “anonymised”, collapses under scrutiny: researchers repeatedly show that a few data points re-identify supposedly anonymous profiles.

How can you limit your exposure?

You cannot opt out of the industry entirely, but you can shrink your footprint meaningfully. Audit app permissions ruthlessly, especially location access, and delete apps you do not use. Use privacy-focused browsers and block trackers. Opt out of the biggest people-search sites; several Indian and international sites offer removal forms, though new ones keep appearing. Under India’s data protection law, you can request erasure and correction from companies holding your data, a right worth exercising against the worst offenders. Consider data-removal services that automate opt-outs across dozens of brokers, weighing their cost against your threat level. And support the structural fix: strong privacy regulation with real penalties is the only force that has ever meaningfully disciplined this industry.

FAQs

Is data brokering legal in India? Largely, for now. India’s data protection law introduces consent and purpose-limitation requirements that challenge broker practices, but enforcement and specific broker regulation are still evolving.

Can I see what brokers know about me? Some large brokers offer access requests; most obscure ones do not. Privacy laws increasingly grant you the right to ask, and exercising it is worthwhile.

Does incognito mode help? Barely. It prevents local history storage but does nothing against tracking, fingerprinting or data already sold.

Data brokering is the internet’s dark matter: invisible, everywhere, shaping outcomes through gravity you cannot see. You did not consent to most of it, and you cannot fully escape it alone. But understanding the machinery, trimming its inputs, exercising your legal rights, and demanding regulation, moves power back toward the people being profiled.

Compiled by the Khabar 24h Editorial Desk from publicly available sources.