← All notes

What You Can Actually Remove From the Internet

From the workshop. This first appeared in the build log of Privacy Guardian, a tool we are building to find and remove personal data from people-search sites. It has not launched.

Most services that sell data removal imply you can disappear. You cannot, and anyone promising otherwise is either confused or selling something.

What you can do is remove most of what is casually findable about you. That is worth doing. It is the difference between someone finding your home address in ten seconds and someone having to actually try, and for most of the threats people face, that difference is the whole game.

Here is the honest breakdown, from most removable to not at all.

Removable: people-search sites

These are the sites that come up when someone searches your name: your address, age, phone number, relatives and past addresses, laid out on one page.

They are also the easiest category, because almost all of them run an opt-out process, some because state law requires it and some because it is cheaper than arguing. It generally works.

The catch: they add you back. These companies refresh their records from the same upstream sources that put you there, so a removal that worked in spring can quietly undo itself by autumn. That is not the opt-out failing. It is how the business works, and it is why removal is a habit rather than a task.

Removable with more effort: marketing databases

The large data cooperatives that sell to advertisers often hold more about you than the people-search sites do, and they are harder to deal with: harder to find, slower to answer, and with processes that are not built to be used.

Do them after the people-search sites, not before. The people-search sites expose your address to anyone who types your name. The marketing databases mostly expose you to advertising.

Not removable: public records

Voter registration. Property deeds. Court filings. Marriage and divorce records. Professional licences. Business filings.

These are public because a society that lets you look up who owns a building, or who is licensed to practise medicine, works better than one that does not. That is not going to be reversed for one person, and no service can remove them for you.

What you can remove is the aggregators that scrape public records and republish them as a bundle. The county recorder having your deed is very different from a website that puts your deed, your age, your phone number and your relatives' names on one page. The first is public policy. The second is a product, and products can be opted out of.

Many states run address confidentiality programmes for people facing documented threats, usually survivors of domestic violence or stalking. If that is your situation, look for yours first. They work at the source, which nothing else here does.

Not removable: breached data

Once it is out, it is out. If your information was in a breach, copies exist on machines nobody has an inventory of, and there is no request to file.

What you can do is different in kind:

  • remove that data from the brokers who bought it;
  • freeze your credit at all three bureaus, which in the United States is free by law;
  • turn on two-factor authentication everywhere that matters.

A credit freeze does more to prevent the concrete financial harm than any removal will.

Not removable: other people's posts, and the archive

You control your own accounts and nothing else. You can delete your own posts and close your own accounts. You cannot make someone else delete a photo of you, and you cannot remove pages from web archives as a matter of course.

So what is worth doing

In order:

  1. Freeze your credit. Free, quick, and aimed at the most concrete harm.
  2. Remove yourself from the people-search sites. This is what makes your address findable in seconds, and it is the most tractable category by far.
  3. Set a reminder to check again in a few months, because they will add you back.
  4. Then the marketing databases, if you have the patience.

That gets you most of the way. It does not make you invisible, and a service that tells you otherwise is one to be sceptical of.

Why say this out loud

Because the alternative is selling a feeling. A removal service that implies total erasure has to keep implying it, which means never telling you when the data comes back, and never explaining why some of it was never removable.

What this is, honestly: harm reduction, not disappearance. Most of the casually findable information comes down, you check whether it comes back, and you keep a realistic picture of what is left. Where people-search sites get your information explains why that last part never ends.