Quick Answer: Free data broker removal means sending a deletion request to each broker that holds your details, then tracking the deadlines and replies yourself. Unlisted, a free MIT-licensed Windows app, automates the sending and tracking for 970 brokers. It runs locally with no account and keeps your data in an encrypted folder. The project says it hasn't yet been tested against live brokers, so expect some rough edges.
Right now, a site you've never heard of may be listing your name, home address, phone number and relatives. Anyone can look you up, including the stalker or scammer who needs one convincing detail. Free data broker removal is possible, but doing it by hand means close to 900 separate requests, each with its own clock. A new open-source tool called Unlisted tries to take that grind off your hands. Here's how the free route works and where it breaks.
Why Removing Yourself From Brokers Is Harder Than It Looks
A data broker collects public records, marketing data and scraped profiles, then sells them to anyone willing to pay. Paid removal services charge for this work. The project's GitHub README cites about $96 to $129 a year for that kind of service, based on prices it checked on 2026-11-02.
Here's the part most people miss. Much of that paid work is just sending requests you already have the legal right to send. In the EU and UK, GDPR gives you a right to erasure. In California, the CCPA gives you a right to delete. Several other US states have similar laws. Where no law applies, a request is still just a request.
The common advice is "send one email and you're done." That's wrong. Brokers buy from each other, so a record you removed in March can reappear in September. Deletion is a per-broker, ongoing task, not a single event. California's own free DROP tool reflects this: its sign-up figures show roughly half a million residents used it in its first eight months, and it still needs follow-up for brokers it doesn't cover.
The Free Route, Step by Step
Doing it yourself works. It just demands discipline. Here's the sequence most people end up following:
- Pick the right law for where you live. GDPR, UK GDPR, CCPA or a plain request.
- Send each request from your own email, spaced out so your mailbox doesn't flag a burst of outgoing mail.
- Wait for the deadline. Under GDPR the default is one month, extendable in complex cases under Article 12(3). CCPA gives 45 days, extendable once by another 45.
- Read every reply. Some confirm removal. Others want a web form, ID or a verification click.
- Re-check every 90 days, because re-listing is common.
Step five is the one people skip. Set a calendar reminder the day you send the first request, or the whole process quietly stalls.
Where Deadlines and Replies Break Down
Most guides stop after step two. The failure modes come after.
Start with bounces. The broker list is built from public records, and companies change their privacy addresses without telling anyone. A request that bounces was never delivered, which means the deadline never started. Unlisted flags bounces so you can switch to the broker's form instead.
Then there are verification requests. A broker may reply asking you to confirm your request at an outside link. That's a real step for some companies, and it's also a classic phishing lure. Unlisted flags any link that leaves the broker's own site, so you can check it before clicking. That's a useful check, and it's one you'll only remember to make if the tool reminds you.
Web forms are the biggest gap. About 160 of the 970 brokers only accept web forms, and many more prefer them. CAPTCHAs stop automation, so the tool opens the form and has your details ready to copy. You still do the clicking.
Free Tool vs Paid Service vs Doing It by Hand
The trade-off isn't really about price. It's about who does the tedious work and where your data sits while it happens.
| Approach | Cost | Who sends requests | Where your data sits |
|---|---|---|---|
| Paid removal service | About $96–$129 a year (figures cited by Unlisted) | The service | On the service's servers |
| Doing it by hand | Free | You, close to 900 times | Your spreadsheet |
| Unlisted | Free, MIT licensed | Unlisted, from your own email | Encrypted file on your drive |
Paid services do real work, especially on web forms. If you'd rather pay to forget about it, that's a reasonable choice. Free tools suit people who are comfortable checking their own inbox and who want their records kept off someone else's servers.
What to Share (and What to Keep Out)
Here's a counter-intuitive rule: send less. Unlisted includes only your name and email by default. Your phone and address stay out unless you add them. The reasoning is simple. A broker that doesn't already have your phone number or address can't match you to a record through them, and it could learn new details from your request.
Use a separate email address for this if you can. Brokers will add your mailbox to their records, and that's the honest trade-off of every removal tool. Start with the people-search sites that already show your details, since those are the ones doing the most visible damage.
Using AI Without Handing Over Your Data
AI is optional. Unlisted offers three modes:
- Off: built-in rules read replies, and nothing leaves your PC.
- Local model: tools such as Ollama, LM Studio or llama.cpp run on your own hardware.
- Your own key: a cloud provider like OpenAI, Anthropic or Groq, who bills you directly.
Before text goes to a cloud provider, Unlisted swaps your name, emails, phones and addresses for placeholders. Anything else in the reply is sent as written. So if you want total privacy, use a local model.
Can a hostile broker manipulate the AI? The README says a reply containing "ignore your instructions" can only produce a wrong suggestion. You see that suggestion before anything happens, and the AI can't send messages or change a case on its own. That's the right design, but read the suggestion before you act on it.
What Free Data Broker Removal Can't Do
Honesty matters more than hype here. Unlisted can't force compliance. Laws differ, and in some places a request is just a request. It can't remove public records, news stories or your own social posts, which are usually out of reach. And it can't stop new listings from appearing.
The project is also open about its testing status. Its automated tests cover the core logic, mail handling and the full app flow, including SMTP and IMAP conversations with servers on the same PC. The README states that it hasn't yet been run against live brokers, a real Gmail account or a real Windows PC. Plan for bounces and a few surprises on the first run. It also isn't legal advice, and it's meant only for your own data. Sending requests in someone else's name without permission can be illegal.
Setting It Up Without Getting Burned
The app ships as one zip for Windows 10 and 11. Unpack the whole folder and run Main.exe. There's no installer and no admin rights needed. Keep Unlisted beside it, since they ship together.
Your data lives in an UnlistedData folder, encrypted with your passphrase. That's good security with one sharp edge: there's no reset. Forget the passphrase and your data is gone for good. Write it down somewhere safe.
You'll also need an email account with an app password, not your main login password. Most providers require one for third-party access.
Frequently Asked Questions
Is free data broker removal actually worth it?
Yes, if you're willing to follow up. Sending requests is free, and the laws in the EU, UK, California and several US states give you a real right to delete. The catch is that removal isn't permanent, since brokers re-list people. Plan to re-check roughly every 90 days.
What is a data broker?
A data broker is a company that collects personal information from public records, marketing sources and online profiles, then sells it. Their products include people-search listings, background checks and marketing lists. Many brokers never interact with the people whose data they hold.
How do I remove my data from brokers without paying?
Find each broker that lists you, then send a deletion request under the law that applies where you live. Track the deadline, read the reply and re-check later. Unlisted automates most of these steps for free, but web forms and CAPTCHAs still need you.
Why would a data broker listen to my request?
In places covered by GDPR, UK GDPR or CCPA, brokers have a legal duty to respond. Regulators can fine companies that ignore these requests. In other places, a broker may ignore you entirely, so keep a record of what you sent and when.
Free data broker removal works best when you treat it as a routine, not a one-off. Pick one people-search site that shows your details, open your listing and note what it reveals. Then start your first request this week. Pass this article to anyone wrestling with an address they can't get off the internet.