Why "delete my data" services are a lie

The green checkmarks

Picture this. You sign up for a removal service. You type in your name, your old addresses, your phone number. A week later the dashboard fills with green checkmarks. Removed. Removed. Removed.

You feel lighter. Then you open Instagram and get an ad for the exact thing you bought at the pharmacy on Tuesday.

Nothing is broken. The service did its job. Its job was just smaller than the ad made it sound.

You were removed from the part of the data industry your nosy neighbour uses. Not the part your ads come from.

The real cost of a cheap tool

Most consent tools are cheap, often free to start. That is the invoice, not the cost. Cheap tracking that is handled badly costs far more, because the bill arrives in what your ads learn.

• Bots forwarded as buyers. A forwarder sends what reaches it. Junk conversions teach the platform to find more junk.
• The sale that never gets sent. A booked call, a phone order or a won deal happens outside the store or the page. Most tools never see it.
• The limit you hit on your busiest day. Hosts and apps cap requests, events or orders, and sending can pause or stop over the limit.
• The build and the upkeep. Containers, plugins and automations need someone to build them and fix them when a platform changes.

The tracking is 0.17 percent of your spend. If one in five of the conversions your ads learn from is a bot or a fake lead, a fifth of the learning signal points at the wrong people, across the other 99.83 percent of the budget.

Cheap tracking is the cheapest line on the bill and the most expensive one to get wrong.

Tools for consent and data requests

When not to use DataCops

• You need a legal opinion. DataCops gives you a consent banner and a record. It is not legal advice, and you still decide your own consent basis.
• You only need a banner and no ads. A basic consent banner is enough if you run no ads and no conversions.

Ads Warmup: tell the ads who pays

Data deletion services records the consent choice. It does not tell the ad platforms who your customers are, so new campaigns learn from scratch. Ads Warmup sends customers you already have, from a list you choose to upload, after you have checked your own consent basis for that list.

Ads Warmup, DataCops' flagship feature, sends them to your ad platforms before a campaign spends:

1. Upload a customer list. A CSV of past buyers, old leads or booked calls. DataCops reads your columns; only email is required.
2. See a match score for every person. An estimate from 0 to 10 from email, phone, name, location, click ID and customer ID, before anything is sent.
3. Pick the event. Purchase, Lead, Complete registration, Add to cart or Schedule.
4. Send server-side. Up to 20,000 people per upload to Meta, Google Ads and TikTok, with a sent, skipped or failed result per person. Google Ads credits only people who clicked a Google ad.

Each row is dated when you press send, not with the old sale date, so it gives a new campaign real customers to learn from on day one. Preview is free; sending needs a paid plan.

What else a consent platform never does

• Capture at the edge. With DNS on Cloudflare, the free, optional DataCops Cloudflare Worker reads click IDs and UTMs off the first request, before the page or any script runs. It captures; it does not block.
• Keep the click on the server. gclid, wbraid, gbraid, fbclid, ttclid and li_fat_id are stored for up to 90 days, so a deal that closes weeks later still finds its click. A signed server-set cookie lasts up to 400 days where enabled.
• Check the lead's email. Fixed rules, not guesses: disposable providers, domains with no mail server and an email risk score. With LeadCops (Business and up), a lead that fails is held and never billed.
• Install on Shopify. The DataCops Shopify app adds a web pixel and a theme app embed, so every paid order reaches your ads, express checkouts included. See Shopify Conversions API.
• Hand evidence to Google. On the Organization plan, the fraud refund report exports bot-flagged Google Ads clicks in the format Google's Click Quality form asks for. You attach it; Google decides.

Which data brokers do they actually reach?

Mostly people-search sites. There are two data industries, and removal services are built for the first one.

The first kind is a safety problem. The second is the targeting problem. The ads promise to fix both.

Read the fine print on any big broker's opt-out page. The usual wording is that the request stops future sharing. Whatever was already licensed to a client stays with that client.

Why does my data come back?

Because the source never went away. People-search sites do not hold your profile in one tidy record. They rebuild it from county property files, court filings, business registrations and old social profiles.

Delete the listing and the next scrape rebuilds it. Often from the very same file.

That is why every honest removal service is a subscription. You are not paying for deletion. You are paying for re-deletion, forever. That is a fair product. It is just not the one on the billboard.

A one-time removal is theatre. The subscription is the admission.

Does the California Delete Act fix it?

It is the best attempt so far, and it still has edges. The Delete Act created DROP, the Delete Request and Opt-out Platform, run by the California Privacy Protection Agency. It opened to the public in January 2026.

One request from a California resident goes to every data broker registered in the state, and registered brokers have to check the list on a schedule and delete. That is a real change from filing hundreds of forms.

The edges are in the words. It covers California residents. It covers registered brokers. And it covers companies that count as data brokers under that law, which leaves out firms that collect data directly from you, like the platforms you log in to.

What actually works, step by step

You cannot erase yourself. You can make yourself a lot harder to profile. In order of payoff:

1. Stop the flow at the source. Turn off ad personalisation in your Google and Meta account settings. On iPhone, tap Ask App Not to Track. Say no to loyalty cards you do not need, because store purchase data is a big broker feed.
2. Use DROP if you live in California. One request, every registered broker.
3. Use your own rights elsewhere. In the EU and UK, a GDPR erasure request under Article 17 goes straight to the company. Many US states now give access and deletion rights too.
4. Freeze your credit with all three bureaus. It does not delete data, but it stops the data being used to open accounts.
5. Then, if you need it, pay for a removal service for people-search sites. Pick it for safety, not for ads.
6. Check yourself twice a year. Search your name and your phone number. What shows up is what a stranger sees.

If you run a website, this is about you too

Here is the part the removal industry skips. A lot of broker data starts on ordinary websites. A marketing tag loads, reads the page, and sends the visit off to a network you never chose. The visitor did not agree to that. Often neither did you.

You cannot fix the broker market. You can stop feeding it. That means three things:

• Ask properly. A consent banner that actually blocks tags until people say yes.
• Send only what you need. The conversion event the ad platform needs to optimise, not every click on every page.
• Send it yourself. Server-side, to a short list of platforms you picked, so nothing extra rides along.

DataCops is the tracking solution for ad-funded businesses: it keeps bots out of what your ads learn from and sends the sale that happens after the form to Meta, Google Ads, TikTok, LinkedIn, Microsoft Ads, Reddit, Pinterest and X.

Those four are the only places it sends data. Its consent manager is first-party, IAB TCF v2.2, served from your own domain. Events go server-side, the pixel and server copies are deduplicated by event ID and counted once, and every row in the delivery log says whether it was sent, held, skipped or failed, and why. For forms, LeadCops checks the lead before anything goes to the ad platform.

The cleanest data is the data you never sent anywhere.

FAQ

Can I warm up a new campaign with my existing customers?

Yes, with DataCops Ads Warmup. Upload a CSV of customers (only email is required, up to 20,000 rows), see a 0 to 10 match score for each person, and send them to Meta, Google Ads and TikTok, dated when you send. Google Ads credits only people who clicked a Google ad.

Are data removal services like DeleteMe or Incogni a scam?

No. They do real work on people-search sites, and that work matters if someone is trying to find your address. The problem is the marketing, which implies you get erased. You get removed from a slice of the market, for as long as you keep paying.

Why does my information reappear after removal?

People-search sites rebuild profiles from public records like property and court files. Those sources never go away, so the listing comes back on the next scrape. That is why every serious service re-submits on a schedule.

Can a removal service delete my data from Acxiom or LexisNexis?

Some services send opt-outs to large marketing brokers, but an opt-out usually stops future sales. It does not recall data already sold. Risk and credit data sits under different laws with narrower rights.

What is the California DROP platform?

DROP is the Delete Request and Opt-out Platform created by the California Delete Act. A California resident files one request and it goes to every data broker registered in the state. It only reaches registered brokers, and only protects California residents.

Is it worth paying for a data removal service?

If you have a stalker, a public job or a safety concern, yes, it saves hours of form filling. If you want to stop ad targeting, it is the wrong tool. Cutting the data at the source does more.

Can I remove myself from people-search sites for free?

Yes. Most big people-search sites have an opt-out page. It is slow and you have to repeat it, which is exactly what the paid services automate.

What can a business do about this?

Collect less, and share only what you need. Ask for consent from your own domain, send ad platforms only the conversion events you actually need, and stop third-party scripts from picking up everything on the page.

Sources

• EUR-Lex: GDPR (Regulation 2016/679)
• Google for Developers: consent mode
• IAB Europe: Transparency and Consent Framework