Privacy Unpacked

Your rightsExplainer

How to Remove Yourself From the Internet (Realistically)

Full removal isn't possible, but you can sharply reduce exposure. Learn to audit, clean accounts, opt out of data brokers, and use state privacy law.

By Privacy Unpacked Editorial Team · Published 30 September 2026 · How we work

A human silhouette is half made of a cluttered teal data network of dots and lines, and half wiped clean to paper white by a large warm-toned eraser, with a small document icon representing privacy law nearby.
Illustration

Search your own name and you'll probably find an old employer bio, a social media profile you forgot about, and at least one people-search site listing your address and relatives. The idea of a clean sweep — deleting yourself from the internet entirely — is appealing, but it isn't how any of the systems involved actually work. What you can do is shrink your footprint methodically, using the tools and legal rights that actually exist, and understand which of them permanently remove data versus just hide it.

Is it actually possible to remove yourself completely from the internet?

No, not completely, and understanding why saves you a lot of wasted effort. The FTC's landmark study of the data broker industry found that brokers "collect and store billions of data elements covering nearly every U.S. consumer," with a single broker holding "information on more than 1.4 billion consumer transactions and 700 billion data elements" and another adding "more than 3 billion new data points to its database each month," according to the FTC's 2014 data broker report. That data is scattered across public records, marketing databases, app trackers, and broker-to-broker sharing arrangements you never agreed to and mostly can't see. Removing yourself from one list doesn't remove you from the others, and new records get created constantly — when you register to vote, buy a house, sign up for a loyalty card, or show up in someone else's contact list.

The realistic goal is exposure reduction: fewer sites showing your current address and phone number, fewer search results linking your name to sensitive details, and a documented paper trail showing you exercised your legal rights where they apply. That's a measurable outcome. Total erasure is not.

Where does my personal information appear online?

Before removing anything, find out what's actually out there. Search your full name, past addresses, phone numbers, and email addresses, including with quotation marks and in combination with your city or employer. Check people-search sites like Spokeo, BeenVerified, and Whitepages, which typically compile public records into a single profile — exactly the kind of profile the FTC describes brokers building from data that is collected and shared "typically behind the scenes, without consumer knowledge," according to the FTC's data broker report. Look at social media platforms you signed up for years ago and forgot. Check old forum posts, comment sections, and any blog or personal website you built in a previous decade. Run an image search on your name too, and check the photo results. Keep a simple list: site name, URL, what it shows, and the date you found it. That list becomes your action plan and your evidence if you later need to prove you asked a company to delete something.

What's the difference between deleting and deactivating accounts?

This distinction trips people up constantly. Deactivating a social media account typically hides your profile and posts from public view but keeps the underlying data stored on the company's servers, often reactivating everything the moment you log back in. Deletion is supposed to permanently remove the account and its content, though most platforms build in some grace period during which the account can still be recovered, and some retained data (like messages you sent to other users, or backups) may persist beyond that. If your goal is to reduce what's publicly visible right now, deactivation might be enough. If your goal is to stop a company from holding your data at all, you need actual deletion — the kind of standard that laws like Virginia's require when they give consumers the right "to delete personal data provided by or obtained about the consumer," per the Code of Virginia's consumer data rights statute — and even then you're trusting the platform's own retention practices, which are rarely fully transparent.

How do I opt out of data brokers and people-search sites?

Each broker runs its own opt-out process, usually a form buried in its privacy policy or a dedicated removal page, and most require you to find your own listing and submit a removal request per site, per broker. The frustrating part is that this isn't a one-time job. The FTC's data broker report noted that "consumer data often passes through multiple layers of data brokers sharing data with each other," and found that seven of the nine brokers it studied "had shared information with another data broker in the study," according to the FTC's data broker findings. Opt out of one broker today, and a different broker can re-aggregate your information from public records, marketing lists, or another broker within months. Removal here is maintenance, not a single project you finish and forget.

We've built a detailed data broker removal guide that walks through the process broker by broker, along with a dedicated tracker for people-search sites specifically, since those tend to be the most visible and the most re-populated.

Can Google's removal tools actually delete search results about me?

This is the step most people get wrong: they assume removing something from Google search results deletes it. It doesn't. Google's "Results about you" tool — reachable from the "Results about you" entry in your Google account menu, or from the three-dot menu beside an individual search result — lets you request removal of certain personal information — like a phone number, home address, or email — from Google Search results, but per Google's own policy documentation for the tool, it only covers information where "you don't control the info yourself," and it explicitly excludes "info that you can remove from the internet yourself, like info on a social media page or a personal blog that you own." In other words, Google can de-index a page from its search results, but the page itself keeps existing on whatever website hosts it, still reachable by direct link, other search engines, or anyone who already bookmarked it. De-indexing hides the needle from Google's haystack; it doesn't remove the needle. If the underlying site is a people-search broker or an old account you control, you still need to go to the source and request deletion there — Google removal alone leaves the data intact.

What rights do state privacy laws give me to delete my data?

A growing number of states now give consumers deletion and opt-out rights. Two of them show how much leverage those rights actually carry, and where they stop: California's Consumer Privacy Act and Virginia's Consumer Data Protection Act.

Under the CCPA, California residents can "ask businesses to disclose what personal information they have about you and what they do with that information, to delete your personal information, to direct businesses not to sell or share your personal information, to correct inaccurate information that they have about you, and to limit businesses' use and disclosure of your sensitive personal information," according to the California Attorney General's CCPA summary. But the right is narrower than it sounds. It applies only to California residents — a "natural person... who resides in California, even if the person is temporarily outside of the state" — and it excludes "publicly available information that is from federal, state, or local government records, such as professional licenses and public real estate/property records," per the same CCPA guidance. That carve-out matters because much of what people-search sites display is exactly this kind of public record data, legally exempt from a deletion request.

Virginia's law works similarly but is more explicit about a loophole that matters for data brokers specifically. Under the Code of Virginia's consumer data rights statute, consumers can request to "confirm whether or not a controller is processing the consumer's personal data," "correct inaccuracies," "delete personal data provided by or obtained about the consumer," get a copy of it, and "opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling." That sounds like a full deletion right, but the statute contains a critical exception for data a broker obtained about you from somewhere other than you directly: the company can satisfy your deletion request "by either (i) retaining a record of the deletion request and the minimum data necessary for the purpose of ensuring the consumer's personal data remains deleted from the business's records and not using such retained data for any other purpose... or (ii) opting the consumer out of the processing of such personal data." In plain terms, a broker can comply with your "delete my data" request just by suppressing you from future marketing use, not by actually erasing what it already collected. Companies also get up to 45 days to respond, "extended once by 45 additional days when reasonably necessary," so this is not an instant process.

The practical upshot: these laws are real tools, not symbolic ones, but they're bounded by residency, public-record exceptions, and broker-friendly compliance language. Filing a formal data request — sometimes called a data subject access request — creates a documented paper trail and often produces faster, more complete responses than an informal opt-out form. Our guide to filing a DSAR covers exactly how to word these requests and what response timelines to expect depending on your state.

Some people pay a subscription service to file these opt-out and deletion requests on their behalf across dozens of brokers at once. That can save real time, especially given how often new listings reappear, but it trades money and a degree of trust in a third party for convenience — you're handing your personal details to another company to manage on your behalf, which is worth weighing against doing the requests yourself using the documentation above.

Removing yourself from the internet, in the sense of erasing every trace, isn't on the table. Reducing what's visible, what's current, and what's easily found — through account audits, broker opt-outs, Google de-indexing where it applies, and formal deletion requests under whichever state law covers you — is achievable, and it's the version of "removal" worth pursuing.

Sources

  1. FTC's 2014 data broker report ftc.gov
  2. Code of Virginia's consumer data rights statute law.lis.virginia.gov
  3. Google's own policy documentation support.google.com
  4. California Attorney General's CCPA summary oag.ca.gov