Data Broker

A data broker is a business whose product is you. Brokers collect personal information from public records, app SDKs, loyalty programs, web tracking, location feeds, credit headers, and other brokers, then aggregate it into detailed profiles and sell or license access to them. Most people have never knowingly interacted with the brokers holding files on them — there is no signup, no dashboard, no relationship — which is precisely what makes the industry effective and, critics argue, dangerous. It operates largely in the shadows of what Shoshana Zuboff calls surveillance capitalism, functioning as its wholesale supply chain.

What they assemble

A single broker profile can contain or infer thousands of attributes: where you live and where you sleep (from location pings), what you buy, your estimated income and net worth, health interests, political leanings, family structure, vehicles, and the devices you carry. The raw inputs are individually mundane — a loyalty-card swipe, an app requesting location permission, a public property record — but stitched together across billions of records they become a dossier no single source could produce. These profiles are sold to advertisers, insurers, employers, landlords, debt collectors, people-search sites, and in many jurisdictions to government agencies, which can buy commercially what they might otherwise need a warrant to collect. Because the data is aggregated second-hand rather than collected from you directly, regulation is thin, error correction is nearly impossible, and "consent" is largely a fiction buried in someone else's terms of service.

Why this is a sovereignty problem

For someone holding Bitcoin, broker profiles are a concrete physical-risk surface, not an abstract privacy gripe. Linking a public wallet address, a KYC exchange record, or a delivery address for mining hardware to a broadly sold identity profile can expose stack size and home location to anyone willing to pay — including criminals, and the history of wrench attacks shows they do their research. The same profiles feed doxxing, targeted phishing that name-drops your real holdings, and SIM-swap target selection. A miner who ordered gear to a home address, posted a payout address in a forum, and completed KYC at an exchange has, without ever being hacked, published enough for a broker-assisted adversary to connect all three.

The regulatory patchwork

Regulation exists but is thin and uneven. The EU's GDPR gives residents rights of access, correction, and erasure that reach brokers in principle, though exercising them against firms you have never heard of is its own project. In the United States, a handful of states — Vermont first, then California — require brokers to register publicly, and California's privacy law adds deletion rights; most other jurisdictions offer little. Canada's PIPEDA imposes consent and purpose-limitation duties, but enforcement against the aggregation economy has been modest. The honest summary: the law may eventually help you clean up, but it will not stop the collection. Prevention remains a personal responsibility.

Starving the brokers

Defense means minimizing what enters the pipeline, because removing data after the fact is whack-a-mole. Practical operational security habits: treat every form field as a future database entry and fill in only what is genuinely required; separate identities and email aliases per context so records do not cross-link; use privacy-preserving purchasing and delivery options for hardware where practical; deny app permissions that feed location brokers; and use the opt-out and deletion mechanisms regulators provide, imperfect as they are. Keep the money layer clean too — self-custody with fresh addresses and a hardware wallet generates no customer record at all, which is the one kind of data a broker cannot buy. The metadata your devices and transactions leak by default is the industry's raw material; every stream you cut off makes the profile they sell about you older, thinner, and wronger — which is exactly what you want.