A few months ago, a friend texted me in a bit of a panic. She had googled her name, and there it was — her home address, age, and even relatives’ names plastered across multiple people search websites. “How is this even legal?” she asked. It’s a fair question, and one I hear all the time. The truth is, those sites are perfectly legal in most cases. But that doesn’t mean you have to leave your information sitting there. You have rights, and with the right kind of privacy request, you can make them take it down.
I’ve sent dozens of these requests myself — some for personal reasons, others to help clients. What I’ve learned is that tone and clarity matter more than anger or threats. The law gives you leverage, but how you use it determines whether your email lands in the trash or gets action.
Before you hit send, it helps to understand what you’re dealing with. People search companies collect data from public records, social media, and third-party brokers. Sites like Spokeo, Whitepages, and MyLife pull from county records, voter registrations, property databases, and other open sources. In many states, that’s all perfectly fair game. But the Fair Credit Reporting Act (FCRA) and a patchwork of state privacy laws still give you the right to request corrections or deletions when information is inaccurate or used in ways that affect your rights.
The easiest place to start is by looking for the site’s “opt-out” or “privacy request” page. Most have one, even if it’s buried in the footer or hidden behind vague wording like “Do Not Sell My Information.” Under the California Consumer Privacy Act (CCPA), and newer state laws in places like Colorado, Connecticut, and Virginia, companies are required to offer that option to residents. Even if you don’t live in those states, many companies extend those rights nationwide because it’s simpler for them to comply across the board.
Still, not all requests are treated equally. A strong privacy request has to hit a few key notes — clarity, proof, and calm professionalism. You’re not begging them to remove your info; you’re asserting your legal right to privacy.
I usually start my emails like this:
“Hello, I’m writing to request removal of my personal information under applicable privacy and data protection laws. The data listed on your site includes my name, address, and age, and I am requesting permanent deletion from your publicly available records.”
That’s the opening. It’s clean, direct, and respectful. Then you include a link to the listing or a screenshot so they can find it quickly. Most of these companies run on ticket systems, so the faster they can verify your request, the faster it gets processed.
One mistake people make is being vague — things like “please delete everything you have on me.” That’s not specific enough. Give them the exact URLs where your information appears. If your name is common, include your city or middle initial. You don’t need to overshare, just give enough to identify the correct record.
Another crucial piece: prove it’s you. Most sites require some kind of identity verification before removing a listing. That might mean uploading a photo ID or signing a short declaration. It feels invasive, I know, but the logic is simple — they have to make sure they’re deleting the right person. You can redact sensitive details like your driver’s license number or photo if you’re uncomfortable. The key is to show that the request is legitimate.
The Federal Trade Commission (FTC) actually supports this process. They encourage consumers to verify their requests because it prevents identity theft or malicious removals. The FTC’s position is that transparency protects everyone involved — both the consumer and the company handling the data.
Once you send the request, give it a few days. Some sites respond within 48 hours; others take up to 30 days, especially if they’re using third-party processors. Under laws like the CCPA and the Virginia Consumer Data Protection Act (VCDPA), they’re required to respond within a set timeframe. If they don’t, you have the right to follow up or escalate it to the appropriate state regulator or attorney general’s office.
I remember one case where a client sent six angry emails to a data broker before asking me for help. I rewrote his message into something calm, clear, and legally structured. We got a confirmation of removal within a week. It wasn’t because my email was magical — it was because tone makes a difference. These companies get hundreds of requests a day. The polite, professional ones stand out. It’s human nature, even in the world of automated data processing.
Here’s something people don’t realize: even when a site removes your record, it doesn’t mean your data is gone forever. The same information may still live on dozens of other brokers that feed into it. Think of it like cutting one head off a hydra. That’s why you’ll want to repeat the process across multiple major sites — Whitepages, Spokeo, BeenVerified, and MyLife are among the biggest. Privacy experts often recommend using removal services or trackers that notify you when your data pops up again. It’s an ongoing process, not a one-and-done job.
There’s also something empowering about doing it yourself. It shifts the dynamic — instead of feeling helpless about your personal information floating around online, you become the one in control. I’ve seen people go from frustration to quiet pride after seeing their names disappear from search results. One woman told me, “It’s the first time I felt like I actually owned my own story again.”
If you hit a wall, or a company refuses your request, that’s when you reference the law directly. You can say something like:
“Under the California Consumer Privacy Act (Cal. Civ. Code §1798.105), I have the right to request deletion of personal data collected about me. Please confirm that my record has been removed and that it will not be republished.”
You don’t need to be a lawyer to use the right language — you just need to sound informed. And if they still don’t comply, you can file a complaint with the California Attorney General’s Office or your own state’s regulator. Most companies cave long before it gets that far.
Something I always remind people: these companies are required to make the process accessible. The CCPA literally mandates that businesses offer at least two contact methods for privacy requests — usually an online form and an email address. If they hide those options or make it impossible to find, they’re already violating compliance. Screenshot everything. Keep records of dates, responses, and confirmation emails. Documentation gives you power if you ever need to escalate.
And don’t be discouraged if it feels tedious. It is tedious. But the time you spend reclaiming your privacy adds up to peace of mind later. Knowing your address and relatives aren’t just sitting out there waiting to be scraped by scammers? That’s worth an afternoon.
If you want a shortcut, the Privacy Rights Clearinghouse keeps an updated list of opt-out links for the biggest data brokers. It’s one of the few nonprofits that track this stuff in plain English. The Consumer Reports Security Planner is another great resource with privacy letter templates you can customize.
I always end my requests the same way. After stating the law, the links, and the verification, I add one final line:
“Please confirm once my information has been deleted. Thank you for your time and cooperation.”
It’s simple, human, and polite. That small note of courtesy closes the loop. You’re asking for something legitimate, not picking a fight. It reminds whoever’s on the other side of that inbox that there’s a person behind the request — someone who just wants their privacy back.
And if that’s you reading this — if your data is floating around online — you have every right to take it back. Start small. Pick one site tonight. Send that email. You don’t have to clean the whole internet in a day. You just have to start reclaiming your corner of it.
For more information, you can check:
