Data Brokers: The Companies That Secretly Assemble Your Identity

somewhere there is a company you have never heard of, with no storefront and no app you ever installed, and it has a file on you. the file has your name on it, and the names of the people you live with. it knows roughly what you earn, what you owe, what you buy, where you go, and the kind of person it has decided you are.

you never signed up for it. you were never told it existed. and it is for sale. this is the data broker industry, one of the largest businesses almost nobody can name, and the thing it sells is you.

the industry nobody can name

ask most people to name a data broker and they cannot do it. that is not your fault. the whole business is built to sit one layer back from the things you actually touch, so you deal with the app or the store or the website, and the broker quietly deals with them.

there are hundreds of these firms, with a handful of very large ones at the center, and some have held files on most adults in entire countries for years. they never needed you to know their names, because you were never their customer. a normal company has to keep you happy or you walk away. a broker feels no such pressure, because the people it has to please are the buyers, and the buyers want the file deeper and more accurate every year.

what do data brokers know, and where does it come from

the first surprise is how ordinary the sources are. almost none of it is stolen or secret. it is collected in plain sight, in the small everyday moments where you hand something over without thinking.

your loyalty card at the supermarket is a data feed. the discount is the price they pay for a record of what you eat, what you drink, what you stopped buying, and roughly when your household changed. the warranty card you mailed in for a kettle was never about the kettle, it was a clean self reported sheet of your name, address, and age. the free flashlight app carried code whose only job was to harvest data and sell it onward.

a lot of what they buy is location. an app that asks for your position to show the weather can log where you sleep, where you work, where you pray, and who you spend your nights near. on its own one ping is nothing. the pattern, day after day, is a map of your entire life.

the public record goldmine

a huge amount comes from records that are public by design. property deeds, court filings, voter rolls, business licenses, marriage and birth records. each was made public for an honest reason, so people could verify ownership or check a court.

brokers scrape all of it at scale, automatically, and fold it together. one record tells you almost nothing. ten thousand records, merged and cross referenced, become a searchable database of where everyone lives, who they married, what they own, and what court they once stood in. add the trail you leave online, the sites you read and the products you lingered on, reported back by trackers on ordinary pages, and the picture fills in further.

building the identity graph

here is where it becomes larger than the sum of its leaks. a broker does not want a pile of disconnected facts. it wants one profile, and the central trick of the industry is stitching every scrap back to a single person. the result is called an identity graph.

the graph takes your loyalty record, your warranty card, your court filing, your location trail, your browsing, your email, and your phone number, and works out that all of them belong to one human being. the matching does not even need a perfect key. two records that share a household, a rough age, and a handful of habits can be linked with high confidence, and once linked they reinforce each other. accuracy compounds, and the file grows tighter with every new feed.

the most valuable thing the graph does is join your offline life to your online one. the version of you that shops in stores and the version that scrolls at night used to be two strangers. once those halves are joined, the profile gets sharp, and what is left is a single record that follows you across both.

what they sell you as

the broker rarely sells the raw file. it sells you sorted into segments, labels describing the kind of person it has decided you are. new parent. frequent traveler. likely diabetic. recently divorced. quietly looking for a new job.

some labels are harmless. some are the most sensitive facts about a life, inferred from your behavior and attached to your name without anyone asking. and many of the labels are guesses. the broker did not read a medical chart to decide you are likely diabetic, it watched what you bought and searched and made an inference, and that inference now travels as if it were a fact. you cannot see the guess, so you cannot correct it.

who is buying, and why it matters

advertising is the loudest buyer but far from the only one. insurers buy data to estimate risk before they price you. lenders and landlords buy it to decide about you before they meet you. employers run background products built on it. and people checking up on other people can buy a surprising amount through services sitting on the same pipes.

that is the part that should give pause. an advertisement you can ignore. a price you are quoted, a loan you are denied, an apartment that quietly goes to someone else, those you cannot. when a decision about your life is made partly from a file you never saw, you do not get to know which line counted against you.

the opacity is the point

the strangest feature of this industry is how little you are allowed to see of it. there is no statement that arrives each month listing what is held on you and who bought it. for most people the profile is completely invisible, working in the background of decisions that affect them.

that opacity is not a flaw in the system. it is the system. a market for personal data works best when the person being described has no idea the description exists, cannot read it, and cannot argue with it.

the rights you barely have

it is not entirely lawless. depending on where you live you may have real rights, to ask a broker what it holds, to ask it to delete that, to tell it not to sell. on paper these are genuine, and they matter.

the trouble is using them at scale. the rights work one broker at a time, and there are hundreds. you would have to find each one, prove who you are to a company that already knows exactly who you are, file the request, and do it again next year when your data flows back in. the people who take this seriously treat it as ongoing maintenance, not a one time fix. they send deletion requests in batches, lean on services that chase brokers for them, and give less at the source. none of that makes you invisible. it slows the flow into the file, and slowing the flow is the realistic goal.

a product made of leaks

the reason this is so hard to undo is that no single step felt like a mistake. the loyalty card saved you money. the weather app was convenient. the public record existed for good reasons. each leak, alone, was small and reasonable.

the broker’s genius is patience and merging. it needs a hundred tiny sources, none of which seemed important, all assembled into a portrait none of them could have drawn alone. the file is not the real you. it is a version of you, built from leaks, that the world increasingly treats as if it were you. and the unsettling part is that you helped write every line, one small leak at a time, and were never shown the page.

The Hidden Internet takes apart the systems that quietly run the modern web, explained from the inside. No products, just the machinery. Subscribe on YouTube.