How Data Brokers Get Your Address

calendar Jun 1, 2026 / · 9 min read · data broker opt out supply chain  ·
Share on: linkedin copy

The Pipeline Behind Your Mailbox

Every piece of unsolicited catalog mail arriving at your door passed through a supply chain before it got there. That chain begins long before a catalog company ever hears your name. It starts with ordinary, unremarkable transactions — buying a house, signing up for a store loyalty card, registering a product warranty, moving to a new address — and ends with a rented mailing list delivered to a direct-mail marketing department.

The companies sitting in the middle of that chain are data brokers: firms whose core business is collecting personal information, assembling it into profiles, and licensing those profiles to other businesses. The Federal Trade Commission documented this industry in its 2014 report, Data Brokers: A Call for Transparency and Accountability, which found that the nine brokers it studied held data on hundreds of millions of Americans — and that most consumers had no idea the industry existed. The Privacy Rights Clearinghouse has catalogued hundreds of active data broker companies operating in the United States today.

Understanding this supply chain is the first step to dismantling it. Once you see which transactions feed your address into the system and which brokers distribute it, you can target your opt-outs where they actually matter.

Where Data Brokers Get Your Address

Data brokers draw from a remarkably wide pool of sources. Some are public by law; others are commercial data feeds that consumers hand over voluntarily, often without realizing it.

Public records are the foundation. Property records filed with county assessors and recorders are public documents that include the buyer's name, the purchase price, and a mailing address. Voter registration files — public in most states — contain name, address, and sometimes date of birth. Court records (civil judgments, liens, bankruptcies, traffic violations) are similarly accessible. Data brokers aggregate these filings at scale, often through bulk purchase agreements with county or state governments.

Retail purchases and transaction data feed the pipeline through several channels. When a consumer uses a store loyalty card, that purchase history — tied to a name and address — can be licensed to third parties depending on the retailer's privacy policy. Catalog companies themselves share or sell their buyer lists. When you buy from one catalog, the transaction may add you to a "buyers list" that the company licenses to other mailers.

Warranty and product registration cards have long been a deliberate data-collection mechanism. Consumers fill in their address, income range, household size, and interests believing the information goes only to the manufacturer for warranty purposes. In practice, registration card data has historically been compiled by specialty list companies and sold as segmented prospect lists.

Magazine subscriptions are another established data feed. Subscriber lists are valuable assets — a subscription to a gardening magazine signals demographic information and purchasing intent — and publishers have historically licensed subscriber addresses to direct mailers.

Online account registrations and lead-generation forms generate address data that can flow directly into broker databases. When a user enters a name and address on a sweepstakes site, a free-sample offer, or a coupon-clipping portal, the fine print in many cases permits that data to be shared with or sold to marketing partners.

Loyalty programs and credit applications create rich address-linked profiles. Every time a consumer applies for a store credit card, the application data — including current address — may be shared with credit bureaus and their affiliated marketing divisions.

The USPS National Change of Address (NCOA) file is a particularly important, and often overlooked, source. When a consumer files a change-of-address form with the United States Postal Service, that information is made available through licensed NCOA providers to businesses that hold existing records for that person. Mailers use NCOA to update their lists with a consumer's new address automatically — meaning a move intended to leave old junk mail behind can actually follow the consumer to the new address within weeks.

Broker-to-broker resale and licensing multiplies the reach of all the above. Once a data broker assembles a profile, it may license that profile to other brokers, who layer in additional data and license it onward again. The FTC's 2014 study found that some brokers obtained nearly all their data from other data brokers rather than from primary sources. An address entered on a single registration card can end up in dozens of separate broker databases through this resale chain.

Marketing Brokers vs. People-Search Brokers

Not all data brokers serve the same function, and understanding the distinction matters for targeting opt-outs effectively.

Marketing and aggregator brokers focus on building large, segmented lists for commercial use. Companies like Acxiom, Epsilon, Experian Marketing Services, and Oracle/Datalogix operate at enormous scale, maintaining profiles on most U.S. households. Their primary customers are direct-mail marketers, catalog companies, financial services firms, and retailers who want to reach specific demographic segments. These brokers license bulk mailing lists — sometimes called "prospect lists" or "compiled lists" — to businesses running direct-mail campaigns. If a catalog company wants to reach households in a specific ZIP code with a household income above a certain threshold and a history of purchasing home goods, a marketing broker like Acxiom can supply that list. Opting out of these brokers directly reduces the number of list rentals that include your address.

For guidance on opting out of Acxiom specifically, see How to Opt Out of Acxiom.

People-search brokers like Spokeo, Whitepages, and BeenVerified serve a different primary market: individuals or small businesses looking up specific people. Their interfaces are consumer-facing rather than business-to-business. They compile address history, phone numbers, relatives, and associated emails into searchable profiles. While these brokers are less central to the catalog mailing-list supply chain, they draw from overlapping data sources and contribute to the broader ecosystem of address exposure. Opting out of people-search brokers reduces overall address visibility.

For a broader look at people-search exposure, see People-Search Sites That Find Your Address.

How a Catalog Company Rents Your Name

Catalog companies and direct-mail marketers do not typically buy address data outright and hold it permanently. They rent it for a single use or a defined campaign period. Here is how that transaction works.

A catalog company — say, a mid-sized outdoor gear retailer — wants to grow its customer base. It approaches a list broker (a specialized intermediary) or deals directly with a data aggregator like Epsilon. The retailer defines its target audience: homeowners, age 35–60, household income above $75,000, interest in outdoor recreation, no existing relationship with the retailer. The list broker queries its data sources and produces a count — say, 400,000 matching records — along with a cost-per-thousand figure (CPM) for the rental.

The rental agreement typically grants the catalog company one-time use of the addresses for a single mailing. The data is "seeded" with decoy addresses (called "seeds" or "canaries") belonging to the broker or third-party monitors, so the broker can detect unauthorized re-use. After the mailing, the rented names are not supposed to be retained — though any recipient who responds to the mailing, places an order, or requests information becomes the catalog company's own customer, at which point that person's data is legitimately in the company's own database.

Your address can enter this cycle multiple times through different channels. A loyalty program sale might place you on a compiled list with Acxiom. The NCOA file updates your address after a move. A catalog purchase makes you a direct mail responder. Each event creates a new data point that brokers can license.

How to Get Out of the Pipeline

Exiting the data broker supply chain requires working at multiple points simultaneously, because data enters from many directions and moves through many brokers.

Opt out directly with major marketing brokers. Acxiom's opt-out form (accessible through their consumer portal) and Epsilon's opt-out process both remove or suppress your record from mailing-list products. Oracle/Datalogix and Experian Marketing Services maintain similar suppression processes. These opt-outs affect the list-rental supply chain at the source.

Use DMAchoice (https://www.dmachoice.org/), the Direct Marketing Association's opt-out service. Registering with DMAchoice instructs member direct mailers to suppress your address from prospect-list mailings. It does not cover non-members, but it reaches a significant portion of catalog and direct-mail volume.

Use OptOutPrescreen (https://optoutprescreen.com/) to stop prescreened credit and insurance offers. These offers are a separate direct-mail channel driven by credit bureau data; this site is the official opt-out mechanism under the Fair Credit Reporting Act and allows either a five-year opt-out or a permanent opt-out by mail.

Submit a suppression request through the USPS NCOA system. While NCOA is primarily a mailer-side service, being aware of it — and understanding that a change-of-address filing can update your record across many broker databases — is important context for new movers.

For broader broker coverage, the manual opt-out process at each individual broker is time-consuming but free. Paid services like Incogni, Optery, and DeleteMe automate this process across dozens to hundreds of brokers for an annual fee. These are legitimate tools for consumers who want comprehensive coverage without investing many hours in individual submissions.

For a full walkthrough of the broker opt-out process, see How to Remove Yourself from Data Brokers.

If you are a California resident, the California Consumer Privacy Act provides additional rights — including the right to opt out of the sale of personal information — that apply to brokers operating in the state. See California CCPA Opt Out for details on exercising those rights.

How This Stops Catalog Mail

The connection between broker opt-outs and reduced catalog mail is direct. Catalog companies rent prospect lists from marketing brokers. If your address is suppressed or removed from those broker databases, it is no longer available to include in a rented list. A catalog company conducting a new-customer acquisition campaign will not receive your name and address, and you will not receive their mailing.

Opt-outs from DMAchoice and major aggregators like Acxiom and Epsilon strike at the prospect-list rental step. People-search opt-outs reduce general address exposure but have less direct impact on catalog-specific list rentals. NCOA awareness prevents a move from automatically refreshing your address across broker systems.

Because data re-enters broker systems through ongoing public records updates, new retail transactions, and broker-to-broker resale, opt-outs require periodic renewal. Most suppression records are not permanent; common windows are two to five years. Building an annual review of major broker opt-outs into a routine maintenance habit is the most reliable long-term strategy.

Internal:

External:

References

Posts in this series