Personal Data Exposure Report

Find out where your personal information is exposed online. This actor scans 20+ data broker and people-search websites for your name, email, and phone number — then gives you a personalised removal guide for each site where your data was found.

What it does

Data brokers collect and sell your personal information — your name, address, phone number, email, relatives, and more. Services like Incogni ($7.49/month) and DeleteMe ($10.75/month) charge recurring fees to find and remove this data. This actor gives you the detection + removal instructions for a fraction of the cost.

For each site where your data is found, the report includes:

• A direct link to your profile on the broker site
• What types of data are exposed (address, phone, email, relatives, etc.)
• Step-by-step removal instructions specific to that site
• A direct link to the site's opt-out/removal page
• What you'll need to complete the removal (email, phone, profile URL)
• Estimated time to complete the removal
• Whether the site is part of a group (one removal covers multiple sites)

Plus a summary with:

• Total sites scanned
• Number of sites where your data was found
• An exposure score (0-100)
• Breakdown of easy vs hard removals
• All data types exposed across all sites

How detection works

The actor uses multiple methods to maximise coverage:

1. Brave Search — searches for your name across 29 known data broker domains, finding indexed listings with direct profile URLs
2. Direct HTTP scanning — checks 6 broker sites that respond to direct requests
3. Proxy scanning — checks 13 additional protected sites
4. DataBreach.com — checks if your email appears in known data breaches
5. Have I Been Pwned — checks email breach exposure (requires API key)

Sites scanned

Tier 1 — Free people-search sites (richest data)

Site	Data exposed	Removal	Time
TruePeopleSearch	Name, address, phone, age, relatives	Online form	2 min
FastPeopleSearch	Name, address, phone, email, relatives	Online form	2 min
ThatsThem	Name, address, phone, email, IP	Online form	2 min
CyberBackgroundChecks	Name, address, phone, criminal records	Online form	2 min
Nuwber	Name, address, phone, email, age	Email link form	3 min
USPhoneBook	Name, address, phone	Online form	2 min
SearchPeopleFree	Name, address, phone, age	Online form	2 min
Clustrmaps	Name, address, phone	Email confirm	3 min

Tier 2 — Paywalled sites (confirms existence)

Site	Data exposed	Removal	Time
Spokeo	Name, address, phone, email, social, court records	Profile URL + email confirm	3-5 min
WhitePages	Name, address, phone, relatives, age	Phone call verification	5-10 min
Radaris	Name, address, phone, email, court, property	Account + phone verify	10-30 min
PeopleFinders	Name, address, phone, age, relatives	Online form	3 min
Intelius	Name, address, phone, email, relatives	PeopleConnect suppression	5-10 min
Instant Checkmate	Name, address, phone, criminal records	PeopleConnect suppression	5-10 min

Tier 3 — Smaller / niche sites

Site	Data exposed	Removal	Time
ZabaSearch	Name, address, phone	PeopleConnect suppression	5-10 min
AnyWho	Name, address, phone	PeopleConnect suppression	5-10 min
Addresses.com	Name, address, phone	PeopleConnect suppression	5-10 min
CocoFinder	Name, address, phone	Email confirm	3 min
VoterRecords	Name, address, party affiliation	Partial opt-out only	5 min

Breach databases

Site	What it checks
DataBreach.com	Whether your email appears in known data breaches
Have I Been Pwned	Email breach exposure (needs API key — $3.50/month)

Search engine coverage (via Brave Search)

The actor also searches Brave for your name across 29 known broker domains. This catches listings on sites that block direct access, including MyLife, TruthFinder, Peekyou, FamilyTreeNow, AdvancedBackgroundChecks, and NeighborWho.

PeopleConnect family: Intelius, ZabaSearch, Instant Checkmate, AnyWho, and Addresses.com are all owned by PeopleConnect. One removal at suppression.peopleconnect.us covers all of them — the report flags these so you don't repeat work.

Input

Field	Type	Required	Description
firstName	string	Yes	Your first name as it appears on public records
lastName	string	Yes	Your last name as it appears on public records
city	string	No	City where you live or have lived — helps narrow results
state	string	No	US state abbreviation (CA, NY, TX) — improves accuracy
email	string	No	Email address — enables breach database checks
phone	string	No	Phone number — enables phone-based search queries

Example input

{
    "firstName": "John",
    "lastName": "Smith",
    "state": "CA",
    "email": "john.smith@example.com"
}

Output

Each site where your data is found includes a full removal guide:

{
    "site": "Spokeo",
    "domain": "spokeo.com",
    "found": true,
    "profileUrl": "https://www.spokeo.com/John-Smith/California",
    "dataTypes": ["name", "address", "phone", "email", "social media", "court records"],
    "removalUrl": "https://www.spokeo.com/optout",
    "difficulty": "easy",
    "removalSteps": [
        "Find your profile on Spokeo and copy the profile URL",
        "Go to https://www.spokeo.com/optout",
        "Paste your profile URL into the form",
        "Enter your email address",
        "Complete the CAPTCHA and click Submit",
        "Check your email and click the confirmation link",
        "Removal takes 24-48 hours"
    ],
    "removalTime": "3-5 minutes",
    "removalRequires": ["your Spokeo profile URL", "email address"],
    "parentCompany": null,
    "scannedAt": "2026-03-19T12:00:00.000Z"
}

For PeopleConnect family sites, the output shows the shared removal:

{
    "site": "Intelius",
    "found": true,
    "removalSteps": [
        "Go to https://suppression.peopleconnect.us/login",
        "Enter your email address and click Submit",
        "Check your email for a verification link and click it",
        "Enter your date of birth and name to find your record",
        "Select your record and set it to 'Suppressed'",
        "Click Save — this covers all PeopleConnect sites (Intelius, ZabaSearch, Instant Checkmate, AnyWho, Addresses.com, TruthFinder, USSearch)"
    ],
    "removalTime": "5-10 minutes",
    "removalRequires": ["email address", "date of birth"],
    "parentCompany": "PeopleConnect"
}

The final row is a summary:

{
    "type": "summary",
    "person": "John Smith",
    "sitesScanned": 23,
    "sitesWithData": 9,
    "exposureScore": 39,
    "easyRemovals": 4,
    "mediumRemovals": 3,
    "hardRemovals": 2,
    "dataTypesExposed": ["name", "address", "phone", "email", "data breaches"],
    "scannedAt": "2026-03-19T12:00:30.000Z"
}

Output fields

Field	Description
site	Name of the data broker
found	Whether your data was detected on this site
profileUrl	Direct link to your listing (when available)
dataTypes	Types of personal data this site exposes
removalUrl	Link to the opt-out/removal page
difficulty	easy (online form), medium (email/phone verify), hard (complex process)
removalSteps	Step-by-step removal instructions for this specific site
removalTime	Estimated time to complete the removal
removalRequires	What you'll need (email, phone, profile URL, etc.)
parentCompany	If set, one removal covers all sites in this group
exposureScore	0-100 — percentage of scanned sites that have your data

How to use the results

Step 1: Review your exposure score

The summary shows how many sites have your data and your overall exposure score. Higher = more exposed.

Step 2: Handle PeopleConnect sites first (biggest win)

If you're found on any PeopleConnect site (Intelius, ZabaSearch, Instant Checkmate, AnyWho, Addresses.com), one removal at suppression.peopleconnect.us covers all of them. The parentCompany field flags these. 5-10 minutes removes you from 5+ sites.

Step 3: Do the easy removals

Sites with difficulty: easy have simple online forms. Follow the removalSteps — most take 2-3 minutes each. Start with the sites exposing the most data types.

Step 4: Tackle medium removals

These need email or phone verification. Budget 5-10 minutes each. WhitePages requires a phone call; Spokeo needs email confirmation.

Step 5: Handle hard removals last

Radaris and VoterRecords have deliberately difficult processes. The removalSteps include fallback options (like emailing customer service directly).

Step 6: Re-scan in 30 days

Data brokers re-add data regularly. Run this actor again in 30 days to check if your data has reappeared. At $1/scan, monthly monitoring costs $12/year vs $90-130/year for Incogni/DeleteMe.

Comparison to paid services

Feature	This Actor	Incogni	DeleteMe
Price	$1.00 one-time	$7.49/month	$10.75/month
Sites covered	20+ direct + Brave Search (29 domains)	180+	750+
What you get	Exposure report + removal guide	Automated removal	Automated removal + monitoring
Removal included	No (step-by-step guide provided)	Yes (automated)	Yes (automated)
Annual cost	$12 (monthly scans)	$89.88	$129
Removal instructions	Yes — per-site steps	N/A (done for you)	N/A (done for you)
Profile URLs	Yes (via Brave Search)	No	No

When to use this actor:

• You want to know where your data is exposed before paying for a removal service
• You prefer to handle removals yourself using the step-by-step guide
• You want a one-time check rather than a recurring subscription
• You're evaluating whether Incogni/DeleteMe is worth it for your situation
• You're a business running privacy reports for clients

When to use Incogni/DeleteMe instead:

• You want fully automated removal with no manual work
• You need coverage of 100+ sites
• You need ongoing monitoring and automatic re-removal

Limitations

• Detection + guide, not automated removal. This actor finds where your data is listed and provides step-by-step removal instructions. You follow the steps yourself — the actor does not submit forms on your behalf.
• Anti-bot protection. Some data broker sites use CAPTCHAs and Cloudflare protection. The actor uses Brave Search to detect listings on these sites indirectly, but direct confirmation may not be possible for all sites.
• US-focused. The sites scanned are primarily US-based people-search engines. Coverage for non-US residents is limited.
• Point-in-time snapshot. Data brokers continuously update their databases. A clean result today doesn't mean your data won't appear tomorrow.
• Common names. For very common names (e.g., "John Smith"), the detection may show false positives — the site has listings for that name, but not necessarily you.

Pricing

Pay-per-event: $1.00 per exposure report (one report per run, regardless of how many sites are scanned).

A monthly scan (12 reports/year) costs $12 — compared to $90-130/year for Incogni or DeleteMe.

Acceptable Use Policy

This actor is intended for:

• Checking your own personal data exposure — find out where your information is listed and take steps to remove it
• Authorized business use — privacy consultancies, HR/compliance teams, identity protection services, and law firms running reports for or on behalf of their clients with proper authorization
• Parental monitoring — parents checking their children's data exposure

This actor must not be used for:

• Stalking, harassment, or locating individuals without their knowledge or consent
• Building databases of personal information
• Any purpose that violates applicable privacy laws (CCPA, GDPR, FCRA, etc.)
• Employment screening decisions (this is not an FCRA-compliant consumer report)

By using this actor, you confirm that you are searching for your own data, or that you have proper authorization from the individual whose data you are searching for.

Important: This actor does not return raw personal data (addresses, phone numbers, etc.). It reports which data broker sites have listings and provides links to those sites and their removal pages. The user must visit each site directly to see the actual data.

Privacy

This actor searches publicly available data broker websites and the Brave Search API using the information you provide. It does not:

• Store your personal information beyond the run duration
• Share your data with third parties
• Create accounts on data broker sites
• Submit any forms on your behalf
• Return raw personal data (addresses, phone numbers) — only which sites have listings

Your input (name, email, phone) is used solely to construct search queries against public websites and APIs during the run.