The Public Dossier: How Background-Check Sites Turn Public Records Into a Privacy Problem
Photo: Ohio. Privacy Public Records Access Study Committee, Public domain, via Wikimedia Commons
Type your own name into a search engine and, somewhere on the first page, you will likely find a website offering your home address, the names of your family members, your age, and your phone number — free of charge, no login required. These are people-search and background-check platforms, and they have quietly become one of the most consequential privacy hazards facing American consumers.
What These Sites Actually Collect
The raw material is almost entirely lawful. County property records, marriage and divorce filings, voter registration rolls, professional licensing boards, court dockets, and commercial marketing lists are all public or semi-public in the United States. Data brokers harvest these sources at industrial scale, merge the records into a single profile, and publish the result — or sell it to employers, landlords, insurers, and anyone else with a credit card.
A typical profile can include current and former addresses going back decades, the identities of relatives and roommates, criminal records if any exist, judgments and liens, and inferred details such as estimated household income or political affiliation. The sites themselves rarely create data; they are aggregators. That distinction matters legally, and it is the reason the industry has survived repeated challenges.
Why It Is Legal — and Why That Does Not Make It Safe
Federal privacy law in the US is a patchwork rather than a shield. There is no general statute governing the collection and resale of personal information from public records. The Fair Credit Reporting Act restricts how background data may be used for employment or housing decisions, but it does not stop a website from publishing your address to anyone who searches for it.
The danger is not theoretical. Open-source intelligence researchers and consumer-protection agencies have documented how scammers exploit these profiles. Romance fraudsters use addresses and family names to build credibility. Phishing kits reference real relatives and past residences to make a threatening email feel legitimate. And for stalking victims, these sites are often the single largest source of exposure — a person attempting to flee an abusive relationship can find their new address surfaced within weeks because a single public record connected the dots.
The Opt-Out Process: Necessary, Imperfect, Repeating
Every major people-search site offers an opt-out, as required by growing state-level pressure and, in California, the CCPA. The process typically follows the same shape:
- Locate your profile and copy its unique URL.
- Submit a removal request through the site's dedicated opt-out form, which usually requires an email address for verification.
- Confirm via a link sent to your inbox — sometimes within minutes, sometimes not at all if the message is filtered.
- Wait for processing, which can range from 24 hours to several weeks.
A handful of states, most notably California and Vermont, have begun requiring brokers to register and, in some cases, to process deletion requests on behalf of consumers. But coverage is uneven, and enforcement is a work in progress.
Why Removal Is a Chore, Not a Checkbox
Here is the part that surprises most people: opting out once is rarely enough. Three mechanisms guarantee recurrence.
First, data re-entry. Brokers continuously re-scrape public records. If your county posts a new property filing, permit, or court entry, your profile can reappear within weeks of your removal request.
Second, site proliferation. When one aggregator is pressured out of a market, its data often resurfaces under a new brand. Consumers who successfully opt out of a dozen sites can find themselves listed on a dozen more a year later.
Third, downstream copies. Even after a site removes your profile, data already sold to third parties is beyond your reach. Removal from the source does not recall the copies.
For this reason, privacy professionals treat opt-outs as scheduled maintenance — a calendar reminder every three to six months, or a subscription service that automates the process across dozens of brokers. Neither approach is perfect, but both meaningfully reduce exposure over time.
Practical Steps Worth Taking This Week
You do not need to disappear from the internet to shrink your footprint. Start with the highest-impact actions:
- Search your name on the major people-search platforms and keep a list of every profile you find.
- Submit opt-out requests to the largest aggregators first; their data feeds many smaller sites.
- Consider a Google "Results about you" tool request if your address appears in search results.
- If you are in an elevated-risk situation — a restraining order, a public-facing job, an active threat — contact a domestic-violence advocacy organization, many of which have address-confidentiality programs in US states.
The underlying problem will not be solved by individual diligence alone. Until federal law treats personal data as something people own rather than something brokers mine, the public dossier will remain a fact of American life. But recurring, deliberate opt-outs are the closest thing consumers currently have to a lock on the front door.