You have probably never signed up with a data broker, yet several of them likely hold a file on you. These are companies whose business is collecting, packaging, and selling personal information, often without you ever interacting with them directly. Understanding data brokers in Singapore, and the wider global industry that feeds them, helps you see where all those eerily well-targeted ads and unsolicited messages come from, and what you can realistically do to shrink the amount of data floating around about you.
What Data Brokers Do and Where Your Data Comes From
A data broker sits in the middle of the information economy. It gathers data from many sources, combines it into a profile, and sells access to that profile to advertisers, marketers, and other businesses. You are rarely the customer, you are the product being described.
The information comes from a surprising range of places:
- Things you share directly, such as filling in forms, entering lucky draws, signing up for loyalty programmes, or agreeing to marketing when you buy something.
- Public and semi-public records, including business listings and information you have posted openly on social media.
- Online tracking, where cookies and advertising identifiers follow your browsing across websites and apps, building a picture of your interests. Our guide on understanding ad tracking and cookies explains this in detail.
- App data, where apps that collect location, contacts, or usage patterns may share or sell that information onward.
- Purchased or leaked datasets, where information changes hands between companies, sometimes legitimately and sometimes after a breach.
Stitched together, these fragments form a profile that can include your approximate age, household, interests, shopping habits, and rough location. Individually each piece seems harmless. Combined, they are valuable, which is precisely why a market exists.
Why It Matters
It is fair to ask whether any of this is a real problem. For most people the day-to-day effect is targeted advertising, which is annoying rather than dangerous. But there are genuine reasons to care.
First, the more of your information that circulates, the more raw material scammers have. Details like your name, phone number, and interests make a phishing message or scam call far more convincing. Data that leaks from a broker can end up fuelling exactly the kind of fraud covered in protecting your data online.
Second, profiles can be wrong, and you usually have no easy way to see or correct them. Decisions made about you based on inaccurate data are hard to challenge when you cannot even view the file.
Third, there is the simple matter of consent and dignity. Many people are uncomfortable knowing that intimate details of their lives are traded without meaningful permission.
In Singapore, personal data is governed by the Personal Data Protection Act, which sets rules on how organisations collect, use, and disclose personal information, and gives you certain rights. The exact rules and how to exercise your rights can change, so check the current official guidance from the relevant authority rather than relying on hearsay.
Practical Steps to Shrink Your Data Trail
You cannot erase yourself entirely, but you can meaningfully reduce how much data is collected and sold.
Start with the sources you control. Be stingy with forms and sign-ups. Every lucky draw, discount, and loyalty scheme is a data trade. Decide if the reward is worth it, and decline marketing consent where you can.
Tighten your tracking exposure. Use a browser with good privacy defaults, limit ad tracking on your phone, and reset or disable your advertising identifier. Reviewing protecting your privacy settings on your phone is a good starting point, and it pairs well with managing your broader digital footprint.
Use email aliases for sign-ups so you can trace and cut off who shares your address, and consider a separate email for shopping and promotions.
Say no to unnecessary permissions. When an app asks for location, contacts, or other access it does not clearly need, decline. Less collection means less to sell.
A note on safety while you do this: never hand over OTPs, passwords, banking logins, or Singpass details to anyone who calls or messages claiming they can “remove your data” or “protect your identity” for a fee. Banks and government agencies never ask for these, and such offers are a common scam hook. Report anything suspicious to ScamShield and the Police.
A Realistic Wrap-Up
The data broker industry is large, quiet, and unlikely to disappear, so the honest goal is reduction, not perfection. Share less at the point of sign-up, limit tracking, use aliases, and trim app permissions, and over time the profile others can build of you gets thinner and less useful. Combined with good scam awareness, that smaller footprint is one of the most practical forms of privacy you can give yourself.