跳至主要內容
KidsKnowRights

Data brokers: the companies collecting your information that you never signed up for

Beyond the apps you use directly, a whole industry buys, combines, and resells personal information. Here's how it works and what little control exists over it.

作者 Ian Massaro

Founder and President of KidsKnowRights6 分鐘閱讀

等待法律專業人士審閱

主題:data brokersdigital privacyappsFTC

本文提供的是一般教育資訊,並不是針對個人的法律意見。KidsKnowRights 不是律師事務所,閱讀本文亦不會建立律師與當事人關係。法律因州份、年齡及情況而異,並會隨時間改變。如需就真實情況取得意見,請諮詢持牌律師或法律援助機構。

本頁全文尚未翻譯,因此以下以英文顯示。上方的摘要、標籤及安全資訊已經翻譯。

Most privacy advice focuses on the settings inside an app you chose to download. A separate, less visible problem is the data-broker industry: companies whose entire business is collecting personal information from many sources — public records, app data, purchase histories, location data — and combining or reselling it, often to advertisers, background-check services, or other data brokers. You never sign up for a data broker directly, which is exactly what makes it hard to know what they hold.

How a data broker actually gets your information

The Federal Trade Commission has studied this industry directly and found that data brokers collect information from an enormous range of sources: public records like voter registrations, commercial sources like store loyalty programs and warranty cards, and other data brokers who resell what they collected from someone else entirely. A single data broker can hold thousands of individual data points on one person, built from sources that person never directly gave information to.

Apps are one major feed into this system. An app's privacy policy — the long document almost nobody reads in full — is often where permission to share data with 'partners' or 'affiliates' is buried, even for an app that seems unrelated to advertising.

Why this industry has so little transparency

The FTC's own reporting has repeatedly recommended that Congress require more transparency from data brokers and give consumers more control, specifically because most people have no practical way to find out which data brokers hold information about them, let alone what that information says. Unlike an app you downloaded, there is usually no login, no account, and no obvious place to even start asking.

Some states have responded with their own data broker registries, requiring brokers operating there to register publicly and, in some cases, offer a way to opt out or request deletion. Coverage varies significantly by state, and there is no single nationwide registry or opt-out system that covers every broker.

The kind of information at highest risk

重要

Location data collected by apps — even ones with no obvious reason to need it, like a flashlight or weather app — has been a specific focus of recent FTC enforcement, because precise location history can reveal sensitive things about a person (where they worship, seek healthcare, or spend time) that they never intended to disclose to anyone. Health, financial, and other sensitive categories of data face similar risk once they leave the original app and enter the resale market.

A practical habit that actually reduces this exposure: check what permissions an app requests at install and revisit them periodically, deny location access to apps that do not need it for their core function, and treat 'why does this need my contacts / microphone / location' as a normal question to ask before tapping allow.

記住這些

  • Data brokers collect and resell personal information from many sources, without you ever signing up directly.
  • The FTC has found this industry lacks transparency, and has repeatedly called for stronger consumer controls.
  • A few states have data broker registries and opt-out options, but there is no single nationwide system.
  • Location and other sensitive data collected by ordinary apps is a specific, documented risk — review app permissions regularly.

資料來源

本文提供的是一般教育資訊,並不是針對個人的法律意見。KidsKnowRights 不是律師事務所,閱讀本文亦不會建立律師與當事人關係。法律因州份、年齡及情況而異,並會隨時間改變。如需就真實情況取得意見,請諮詢持牌律師或法律援助機構。