Three Records, One Stranger: The Experiment That Shows How Fast a Shadow Profile Grows

The deal Dana Ruiz offers is simple, and slightly unnerving. Hand her three pieces of information — your full name, an address you lived at a decade ago, and, if you own property, a copy of your deed — and within an afternoon she will show you a dossier on yourself that you did not know existed.

Ruiz, an independent privacy researcher based in Ohio, has run this exercise dozens of times at community events, libraries, and continuing-education seminars. She does not hack anything. She does not need to. Everything she compiles comes from sources that are, in the eyes of the law, public — and from the commercial ecosystem that has learned to profit from that fact.

The First Twenty Minutes

The name and former address are enough to open doors. County assessor databases, many of them searchable for free, connect a person to property histories, purchase prices, and mortgage records. Voter registration rolls — public in most states — add party affiliation where applicable, along with birth month and, in some states, full date of birth.

From there, the trail widens. Court dockets, marriage and divorce filings, business registrations, professional licenses, and even hunting permits in certain states are all indexed and, increasingly, all harvested. By the twenty-minute mark, Ruiz typically has a person's current address, phone number, relatives, and often the names of neighbors.

What surprises participants most is not any single record. It is the aggregation. Each document is innocuous on its own. Stitched together, they form what privacy professionals call a shadow profile — a portrait maintained by data brokers that is often more current and more complete than anything the subject has voluntarily posted online.

Who Buys This, and Why

The buyers are not a monolith. Insurance underwriters use broker data to price policies. Debt collectors and process servers rely on it for skip-tracing. Employers purchase background-screening packages built from the same raw material. And then there is the segment that concerns Ruiz most: people-finder websites that sell anyone's address history and household composition for the price of a monthly subscription.

The commercial logic is straightforward. Public records are cheap to collect, and the technology to normalize, deduplicate, and cross-reference them has become inexpensive. A single broker can hold thousands of data points on an average American adult — inferred religion, estimated income, health-condition segments like 'diabetes interest' or 'smoker in household.' None of it is confirmed. Much of it is wrong. All of it is for sale.

Where the Errors Creep In

Ruiz is careful to emphasize the unreliability of these profiles. In her sessions, she routinely finds subjects matched with relatives they barely know, addresses they never occupied, and in one memorable case, a criminal record belonging to someone who shared a name and a birth year.

That inaccuracy cuts both ways. It is a privacy problem, but it is also a fairness problem. When landlords, insurers, or employers consult data-derived reports, an erroneous merge can follow a person for years. Under the Fair Credit Reporting Act, consumers have rights when such data is used for eligibility decisions — but most Americans never learn a report exists until something goes wrong.

Shrinking the Profile, Legally

Ruiz closes every session with the same practical checklist. None of it requires a lawyer, and none of it crosses into anything questionable.

First, data-removal requests. Most states — California, Virginia, Colorado, Connecticut, and Texas among them — now require brokers to honor deletion requests from residents, and several have created centralized opt-out portals. Even in states without such laws, individual brokers maintain opt-out pages, though the process can be tedious and must be repeated annually.

Second, seal what can be sealed. Many states allow voters to request that registration information be kept confidential, often with expanded eligibility for people in sensitive professions or circumstances. Records-sealing programs for old court matters vary by state but are worth investigating.

Third, reduce new exposure. Using a registered-agent service for any business filing, declining optional disclosures on professional licenses, and thinking twice before entering name-and-address contests all slow the accretion of new records.

Fourth, freeze the credit files. A security freeze at the three major bureaus does nothing about brokers directly, but it blunts the most damaging downstream use of a leaked profile: new-account fraud.

The Uncomfortable Lesson

The point of Ruiz's experiment is not that public records are sinister. Transparency in government has genuine civic value, and she is quick to say so. The point is scale. A neighbor flipping through the assessor's roll in 1985 could learn about your house. A broker in 2025 can learn about your house, your household, your inferred politics, your estimated health, and your relatives — and can deliver it to a stranger's phone in seconds.

The law, for now, treats each record as a separate, harmless thing. The shadow profile is what happens when nobody has to look at them together. Ruiz's volunteers leave her sessions with two reactions she has learned to expect: a queasy recognition of how exposed they are, and, more often than she predicted, the resolve to do something about it.