The job you are paying for
Deletion services sell one job. You pay a subscription, they write to the data brokers on your behalf, and you fade off the lists. The pitch works because the job sounds mechanical: send the requests, collect the confirmations, done. Almost nobody ever sees that job audited.
Late last year, researchers at a California university ran it by hand, at full scale. They took the state's official register of data brokers, 535 companies at the time, each one in the business of holding files on people it has never met, and asked for a deletion. They did it under the strongest consumer privacy law in the United States, in the state where every one of those brokers had registered by name.
Two people who never existed
The researchers also did one thing no removal service can do for you. The two people asking were invented: synthetic identities, built for the study, with names and addresses belonging to nobody. Which means that for once, the truth of every reply could be checked against a known answer. No broker had ever held a record on either of them, because there was nothing to hold.
Then they counted what came back.
Mostly, nothing came back
The law gives a company forty-five days to respond to a deletion request. Of the 322 deletion requests the researchers managed to file, fewer than a third drew a substantive answer. Seven in ten went into the dark: no result, no refusal, no sign that a person had asked for anything at all.
Opt-out requests, the ask that tells a broker to stop selling or sharing you, did somewhat better, and still one in three ended without clear confirmation.
The study, in numbers
Sit with the second number. This is not a story about a few negligent operators. Silence was the majority response of a registered industry to the law of the state it registered in.
The replies were stranger than the silence
Remember that neither requester existed. The only correct answer, from every broker on the register, was some version of "we hold nothing on this person."
That is not what always came back. Some brokers confirmed deletion anyway: request completed, for data that was never there. Read that plainly. A deletion confirmation is supposed to be a report that something happened. Here it was produced for people with nothing to delete, which tells you what it can be in practice: a template that closes a ticket, not a statement about a database.
And there is a mirror of that reply waiting for real requesters. A broker that answers "we hold no record of this person" may be telling a narrow truth. The search ran on what you supplied, a name, an email, an address, and found nothing, because the profile that matters is not filed under any of them. It is tied to a device, a hashed identifier, a cluster of attributes: age, education, postcode, habits. Files like that get called anonymised, and they identify people anyway; that is exactly what they are sold for. So "no record of you" and a working profile of exactly you can sit in the same building, and both statements survive an audit. Your deletion request bounced off the one part of the file they never needed.
We have said this in gentler forms before: everything a company tells you about your data is a claim, not something you can observe for yourself. Nobody watches the database. This study is the rare case where the claims could be tested from the outside, and some failed in exactly the way you would fear. That is not a reason to stop asking. It is the reason the ask, the date, and the exact words of the answer belong on a record you keep, because whatever the database did, the reply is evidence of what they said.
The toll booth on the way out
Three more findings deserve daylight.
First, more than a fifth of brokers demanded identity verification before honouring an opt-out, which the law explicitly tells them not to do, and nearly four in ten asked for more personal information than the request needed, in some cases as much as a Social Security number. Follow that to the end: to get out of a stranger's database, you are asked to hand the stranger a richer file on yourself than the one you came to object to.
Second, for a few brokers the request was not a burden but inventory. Three began sending marketing to the email addresses the requests were filed from. Those addresses belonged to the invented people and were used nowhere else, so there is exactly one place they can have come from. The request to be left alone was itself collected and used.
Third, the meter. One round of requests across the register cost the researchers roughly twenty hours per person for opt-outs and twenty-five for deletions, a few minutes of forms at a time, multiplied by hundreds of brokers. That is one round, once, against a register that keeps growing, aimed at an industry that re-acquires people from the same public records and feeds it drew on before. This is the arithmetic under every service that sells broker removal as a subscription: the job never finishes, so you pay monthly for your own absence.
And there is a final twist in the mechanics. An opt-out only holds if the broker remembers who opted out, so to keep you off the lists, they keep you on one: a suppression file whose entire content is you, retained so the marketing stops. Even opted out, you are still on file.
Aimed at the wrong layer
Now look at where deletion services point your money. Almost exclusively here, at the brokers and the people-search sites: the layer where seven in ten requests just measured out as silence, and where whatever does come down gets restocked from the same feeds. What the subscription actually delivers is a dashboard. Listings found, requests sent, records removed, a number that climbs while you watch. The number counts asks, not outcomes, and the asks are aimed at the one layer that has just been shown, at register scale, not to answer.
Now weigh what that layer even holds against what it does not. A people-search listing is the shallow end of you: name, addresses, phone numbers, relatives, the scrapings of public records. The deep end is somewhere else entirely. What you typed into a chatbot at two in the morning. A matrimony profile. A therapy intake form. An interview screening, an ID check, a purchase history. That data sits with the products you actually use, and no removal subscription writes to any of them. It cannot; it does not know your life. So the spend flows to the shallow layer that will not answer, the sensitive layer never gets asked, and the dashboard keeps you feeling handled the whole time.
That is the misdirection. Not that removal services are a scam, but that the attention is pointed at the wrong end of the pool, and the feeling of progress keeps it there.
Now compare the companies that actually know you
Here is the part of the research that almost never gets quoted next to the broker numbers, and it changes the strategy entirely.
When researchers tested deletion requests against ordinary online services, the places where people hold real accounts, roughly three in four erasure requests were honoured without any observable breach of the law. Not perfect, and about a quarter still failed in some way, but a different universe from the brokers' seventy per cent silence. And when Europe's regulators ran a coordinated audit of the right to erasure across 764 organisations last year, the failures they found were mostly of the unglamorous kind: no documented procedure for handling the request, staff never trained to recognise one, deletion routines that exist on paper and run by hand. Sloppiness, not stonewalling. Erasure has also become one of the most complained-about rights in Europe; in some countries it is now nearly a fifth of all privacy complaints, which tells you people have started asking in numbers.
The difference is not that first-party companies are nicer. It is structural. At a service you use, you are a customer with an account, an email address they already recognise, a relationship with standing. Verifying you is trivial, ignoring you is riskier, and the file they hold is one they collected from you directly. At a broker, you are a stranger writing to a stranger, asking them to search a warehouse you cannot see for a version of you that came from somewhere you will never learn.
Deletion is not equally broken everywhere. It half-works exactly where you are known, and it fails almost completely where you are merchandise.
The state stopped asking politely
California has drawn its own conclusion about the broker layer. Under its Delete Act, the state built a single front door: one deletion request, filed once with the regulator, that every registered broker is required to collect and act on. Consumers have been able to file since January. From August, brokers must check for requests every forty-five days and report what they did with each one.
If you are a California resident, use it. It costs nothing and it asks once instead of five hundred times. What comes back is still each broker's own account of what it did, so file it the way you file every reply: a dated claim on your record, not a result you can check.
And notice what it is: a regulator conceding, in infrastructure, exactly what the study measured. A right that depends on writing individually to hundreds of companies, each with its own form, its own demands and its own silence, is not a right most people can exercise. So the state routed around its own request model.
What the front door does not change is the shape of the problem underneath. The legal exemptions still apply. The register only lists the brokers that registered, and that gap is not hypothetical: when privacy researchers cross-checked the state registries against each other, hundreds of brokers registered in one state were missing from another, and the count could only see brokers that had registered somewhere at all. The industry does not end at a state line, and parts of it sit where no regulator's letter reaches. And a broker deleting its copy says nothing about where your data came from or where it already went.
Recall is a fantasy. Supply is not.
So be honest about what you are dealing with. If you have lived a normal digital life, a profile of you exists out there, assembled from places you will never trace. You do not know how many copies were made, inside companies or between them, how many borders they crossed, or which jurisdictions they now answer to, if any. The scale of storage makes this ordinary: a consumer hard drive costing less than a games console can hold a basic record on every adult in the West, and copies like that sit in office drawers and garages, past the reach of any regulator's script. Copying is free and instant; recall is slow, unverifiable, and in the stranger layer, as the numbers above show, mostly ignored. Planning to call it all back is not a strategy. It is a wish, and we mapped why in the copies piece.
But the broker layer does not feed itself. It buys and scrapes downstream of the first-party companies you actually deal with: the apps, the checkouts, the sign-ups, the accounts you forgot you had. That layer you can reach, because you are known there, and the evidence says the requests you file there mostly get acted on. Delete what they will release. Object to the selling, the sharing and the profiling, so what stays stops flowing outward; that request, and why it beats the delete button, is where the deletion trap piece ends up. Every valve you close at the source is one less feed the warehouse buys tomorrow.
And keep the record. If the broker study proves one thing beyond argument, it is that the reply, or its absence, is the only observable fact in the whole exchange. A dated request, a dated silence, a dated claim of deletion: that is what you can hold, and it is what a follow-up, a complaint, or a regulator eventually runs on. The database is theirs. The record of what they said about it can be yours.
Start the record
We are not a removal service, and after everything above you know why we would not want to be. DÆTRAX is the ledger side of this: you log the companies you actually deal with, the requests are drafted in plain English for you to send from your own inbox, and every reply, claim and silence gets a date against a deadline. If a "deleted" ever turns out to mean nothing, you will be holding the version of events that shows what was said, when, and by whom.
You cannot audit their warehouse. You can close your own valves, and own the record of having asked. Start your record →