How your exposed personal information raises stalking risk

By Updated Corrections

By Delist.ai · 6 min read · Last updated March 2026

At a glance

  • People-search sites publish home addresses, workplaces, and relatives for anyone to find
  • A stalker can locate someone's current address in minutes for a few dollars
  • Opting out of one broker is not enough: data reappears and other sites still have it
  • Every US state offers an Address Confidentiality Program for domestic violence survivors
  • Removing data from the highest-traffic brokers first provides the most immediate protection
  • Long-term safety requires breaking the cycle that feeds new addresses back to brokers

Most relevant if this is you: Privacy for law enforcement officers · Privacy for judges and prosecutors · What to do after being doxxed

Data brokers collect personal information from public records, commercial data feeds, and other sources, then publish it on people-search sites for anyone to find. For most people this is an annoyance: unwanted spam, unsolicited calls, a vague sense of exposure. For anyone being stalked, fleeing an abusive situation, or living under a protection order, it is a direct threat to physical safety.

People-search sites do not require a reason for a lookup. There is no background check on the person searching. There is no notification that someone found your profile. A current home address, a workplace, the names and addresses of your relatives: all of it is available to anyone willing to spend a few minutes and a few dollars. Your exposed personal information is the supply chain for the surveillance that puts you at risk.

How stalkers use people-search sites

A current home address can create serious risk in a stalking situation. People-search results may also connect it to phone numbers, relatives, maps, or property information. Availability, freshness, and price vary by site.

But the harm goes beyond a home address. Stalkers use people-search data to build a comprehensive picture of their target's life:

According to the Bureau of Justice Statistics, an estimated 3.4 million people in the US are stalked each year. The majority of stalking victims know their stalker, typically a former intimate partner. People-search sites hand these individuals the tools to continue contact and surveillance after the victim has tried to disappear.

Restraining orders and protection orders are important legal tools, but they do not remove your address from the internet. A person prohibited from contacting you can still look you up on any people-search site without triggering any alert or violation. The information industry operates entirely outside the legal protections meant to keep you safe.

What data enables stalking

Not all personal data carries the same risk. Understanding which data points are most dangerous helps prioritize what to remove first.

Why standard opt-out is not enough

Every major people-search site offers some form of opt-out process. You can submit a request, verify your identity, and have your profile removed. The problem is that removal is temporary and incomplete.

Data reappears. Most brokers re-ingest public records on schedules that vary by provider and source. When they do, your profile is recreated from the same sources that generated it the first time. An opt-out you submitted three months ago may already be undone.

Brokers operate on different timelines. Some process removals within 24 hours. Others take two to four weeks. A few require postal mail or notarized documents. During the gap between submitting a request and the removal taking effect, your data remains fully accessible.

One missed site means full exposure. There are over 40 major people-search brokers and hundreds of smaller ones. Removing your data from 39 of 40 sites still leaves your home address available on the one you missed. A stalker only needs to find you once.

Comprehensive removal means monitoring and re-removing across dozens of sites on an ongoing basis. A one-time opt-out sprint provides temporary relief, but it does not provide lasting protection. The data supply chain is continuous, and your defense needs to be continuous too.

Address confidentiality programs

Every US state operates some form of Address Confidentiality Program (ACP), sometimes called Safe at Home. These programs provide a substitute mailing address, typically a state government PO box, that victims of domestic violence, stalking, sexual assault, and trafficking can use in place of their real address on public records.

What ACPs cover: Voter registration, vehicle registration, driver's license records, property tax filings, and other government records that would otherwise expose your physical address. Mail sent to your substitute address is forwarded to your actual location by the program.

Eligibility: Requirements vary by state, but most programs are available to victims of domestic violence, stalking, sexual assault, human trafficking, and in some states, reproductive healthcare workers or other at-risk professions. You typically need to apply through a victim advocate at a local domestic violence shelter or law enforcement agency.

Limitations: ACPs protect government records, but they do not remove your address from commercial data brokers. If your address was published on people-search sites before you enrolled, it will remain there unless you opt out separately. ACPs also do not cover all public records. Court filings, for example, may still expose your address in some jurisdictions. Think of an ACP as one layer of protection, not a complete solution.

Not sure how much is out there? Delist scans for your personal information across people-search sites and shows you exactly where it appears.

Check your exposure free →

Priority removal order

If you need to act quickly for your safety, focus on the sites that receive the most traffic and tend to have the most current data. These are the sites a stalker is most likely to find through a simple Google search for your name.

  1. High-traffic name-search sites. A handful of well-known people-search sites consistently rank in the top Google results for name searches. They publish current address, phone, email, and relatives, often without any paywall for basic results.
  2. Free-access address lookups. Several sites display home address, phone number, and nearby neighbors directly on the page without requiring an account or payment. Their lack of friction makes them particularly easy for anyone to use.
  3. Paid background-check services. These require a subscription for full reports, but basic profile information (name, city, age) is often visible in search results and cached pages before any payment.
  4. Data-aggregator profiles. Some sites compile unusually detailed profiles that include property records, professional history, and social media links. Removal from these often requires identity verification and takes longer.
  5. Contact-data and professional-lookup brokers. Sites that aggregate employer information and professional details are a secondary but significant risk, particularly for locating a workplace.

The more sites you cover, the harder it becomes for anyone to find your information through a casual search. Our removal guide covers the opt-out process for dozens of people-search sites, including the highest-traffic ones.

Breaking the address update cycle

Removing your data from brokers is only one part of reducing exposure. If an address continues to enter public records and commercial databases, a broker may create another profile later. Where lawful and practical, reduce unnecessary upstream disclosures and re-check broker listings as part of a broader safety plan.

Use a PO box or commercial mailbox for all correspondence. A USPS PO box or a commercial mail receiving agency (CMRA) like a UPS Store mailbox gives you a physical mailing address that is not your home. Use it for all mail, subscriptions, and online purchases. Some CMRAs provide a street address format, which is accepted by more services than a PO box number.

Register a business entity or use a registered agent. If you own property or run a business, those records are public and tied to your address. A registered agent service can hold your business registration, and an LLC or trust can hold property title, keeping your name off the public deed. Consult an attorney for your specific situation. The rules vary significantly by state.

Set up mail forwarding carefully. USPS mail forwarding is itself a data source. When you file a change of address, that information enters the National Change of Address (NCOA) database, which is licensed to data brokers. If possible, update your address directly with each sender rather than using USPS forwarding. If you must use forwarding, be aware that your new address will likely reach brokers within 30 to 60 days.

Limit what you share going forward. Every online purchase, loyalty program signup, app installation, and warranty registration is a potential data source. Use your substitute address wherever possible. Avoid using your real name on accounts that do not legally require it. The less new data you generate, the less brokers have to work with when rebuilding your profile.

Resources

If you are in immediate danger, call 911. For ongoing support and safety planning, the following organizations provide confidential assistance:

Frequently asked questions

Can a stalker find my new address if I move?

It can. Address updates can enter public and commercial data sources that brokers later ingest, but there is no universal timing window. If you are relocating for safety, ask a qualified advocate whether your state's Address Confidentiality Program is appropriate before changing public-facing records. A PO box alone does not provide the same legal protections.

Do restraining orders remove my information from people-search sites?

No. A restraining order or protection order is a legal prohibition on contact and proximity. It does not affect commercial databases or people-search sites. Your address, phone number, and other personal information remain published on data broker sites regardless of any court order in place. You must opt out of each broker separately. Some brokers offer expedited removal for victims of domestic violence or stalking if you provide documentation, but this is voluntary on the broker's part. No federal law requires it.

How quickly can a data broker re-list my profile after I opt out?

Brokers refresh their databases on schedules that vary by provider and source, using public records, commercial data feeds, and other broker databases. Your profile can reappear after a later data refresh. Some brokers maintain a suppression list intended to prevent re-listing, while other processes may apply only to the current record. Ongoing monitoring helps detect when a listing returns.

Should I use a privacy removal service if I am being stalked?

A removal service can significantly reduce your exposure across dozens of sites simultaneously, which is difficult to do manually on an ongoing basis. However, it should be one part of a broader safety plan, not the only step. Combine it with an Address Confidentiality Program enrollment, substitute address usage for all records, and guidance from a victim advocate who understands your specific situation. A removal service handles the repetitive work of monitoring and re-opting out, freeing you to focus on other safety measures.

Are there laws that protect stalking victims from data brokers?

A few states have enacted laws that provide some protection. California's Delete Act (SB 362) requires data brokers to register and honor deletion requests through a centralized mechanism. Several states allow domestic violence survivors, judges, law enforcement officers, and reproductive healthcare workers to request expedited removal. Daniel's Law, originally passed in New Jersey and adopted in other states, restricts publication of personal information for judges and law enforcement. However, there is no comprehensive federal law that requires data brokers to remove information for stalking victims. Address Confidentiality Programs exist in every state but only cover government records, not commercial databases.

Sources

Sources accessed . See our source standards.

See where your personal information is exposed

Run a free scan to see which people-search sites are publishing your home address, phone number, workplace, and relatives. Delist files the removals for what we find and keeps checking as data comes back.

Run a free scan →