Data Removal for Older Adults: Privacy and Scam-Safety Guide (2026)

Older adults and the people who help them may want to reduce the amount of personal information visible on people-search sites, directories, public profiles, and search engines. Privacy cleanup can be useful, but it is not a complete fraud-prevention plan and it does not erase government records, medical records, financial records, or information already held by trusted contacts.

The safest approach is collaborative and consent-based. The older adult should understand what is being requested, which information a provider wants for matching, and what a request will not change. A family member or caregiver should not collect extra identity documents or submit a request in someone else's name without permission or another lawful basis to act.

Quick answer

1. Start with the safety and fraud problem you are trying to solve: a visible home address, a phone listing, an active scam, an identity-theft event, or unwanted marketing are different issues.
2. Search for a matching people-search listing using the minimum identifiers needed. The FTC explains that these sites may compile public records, public social profiles, and information from other brokers.
3. Use the provider's current first-party privacy or opt-out route. Save the exact listing, request, confirmation, and later source check.
4. Protect Medicare, Social Security, bank, and account information separately. Medicare's fraud guidance says to protect your Medicare card, number, and other personal information and to check your claims regularly; it also explains that requests for personal information by phone are limited.
5. If money or identity information has already been sent, use IdentityTheft.gov and the relevant bank, card issuer, insurer, or government program immediately. Removal from a people-search site does not reverse a transaction.

Match the action to the risk

What people-search sites may show

The FTC describes people-search sites as a type of data broker. It says reports may include names, former names, current or previous addresses, property information, education or employment history, and family-member information, depending on the provider and source. A profile may be incomplete or belong to someone with a similar name.

Do not assume a listing proves that the provider has a complete or accurate file. Confirm the match with more than the name when safe. Do not search a relative's Social Security number, Medicare Number, full birth date, or other high-risk identifier on a public site merely to find a profile.

An opt-out usually addresses the provider's own display or sale of a record. It does not automatically remove:

• the original property, court, professional, voter, or other government record;
• a relative's or neighbor's separate profile;
• a copy held by another provider;
• an account, bank, insurer, healthcare, or government record;
• a search-engine result that has not refreshed; or
• information that a scammer already copied.

A consent-based family workflow

1. Agree on the purpose

Ask the older adult what they want to change and what they want to preserve. A phone listing may be unwanted for strangers but useful for a doctor, family member, or service provider. Do not remove a public contact route that the person depends on without arranging a safe replacement.

2. Search privately and record only what is necessary

Use a private browser window and search the person's name with a city or state. If the person has a common name, use a known phone number or old city only when necessary and safe. Record the provider, exact URL, visible field, and date. Avoid copying the whole profile into email, shared notes, or a cloud folder that does not need it.

3. Use the source's current route

Open the provider's privacy policy or opt-out page from its own domain. Confirm that the route applies to the product displaying the information. Requirements can include an email link, a profile URL, account access, or another verification step. Do not rely on a historic blog instruction or assume one provider's request covers an affiliate.

4. Minimize verification

Provide only the information the live process reasonably requests. Before uploading an identity document, read why it is requested, whether redaction is accepted, how it will be stored, and whether another route is available. If a family member is submitting the request, use the provider's current authorized-agent or representative instructions when available. Permission alone may not satisfy every provider's verification rule.

5. Save and re-check

Keep the submission date, confirmation, provider response, exact source URL, and a later check. Mark the request as submitted, acknowledged, provider-reported, source-checked, returned, or unknown. Do not mark it deleted merely because an email was sent or a search result changed.

Protect Medicare and health information

Medicare's official fraud guidance says to protect your Medicare card, number, and other personal information and check your Medicare claims regularly. It says Medicare will not call to sell you anything and that Medicare or someone representing Medicare will call and ask for personal information only in limited situations, such as returning your call after you joined a plan, reported fraud, or left a message. Do not give your Medicare card, Medicare Number, Social Security card, or Social Security Number to anyone except your doctor or people you know should have it, such as an insurer acting on your behalf or someone who works with Medicare.

Use Medicare.gov's fraud guidance instead of a phone number supplied by an unexpected caller. A Medicare plan or representative may contact a member in limited situations, but Medicare's marketing rules explain when plan representatives may call and what they may ask. Verify through a known official channel rather than trusting caller ID.

If a caller says a family member is in danger, slow down and contact that family member using a known number. The FTC's family-emergency scam guidance warns that scammers may use convincing stories or voice cloning. The FTC's gift-card guidance explains that no legitimate business or government agency will demand payment by gift card.

If money or information was already sent

Act quickly, but do not pay a second company that promises to recover the money for an upfront fee. The FTC warns about refund and recovery scams, which target people who already lost money. Depending on what happened:

1. Call the bank, card issuer, payment app, wire service, or gift-card company using a number from a statement or official site. Ask what recall, dispute, or fraud process is available.
2. Change compromised passwords and review account sessions, forwarding rules, and multifactor methods.
3. Contact Medicare or the insurer through a known official channel if a Medicare or health-plan number was exposed.
4. Report identity theft at IdentityTheft.gov and follow the personalized recovery plan.
5. Report the scam to ReportFraud.ftc.gov, and keep the case or confirmation information.
6. Preserve the message, caller details, receipts, transaction IDs, and any profile or phone number used.

Data removal can reduce future discoverability, but it cannot undo a transfer or guarantee that the scammer did not retain a copy.

Household and account safeguards

Review the older adult's settings together, at a pace they understand:

• use unique passwords and multifactor authentication where supported;
• remove unused apps, connected accounts, and old recovery methods;
• restrict public visibility of a home address, personal phone, birth date, and daily routine;
• review bank and Medicare claims for unfamiliar activity;
• use call-screening or carrier controls if they are helpful, while keeping trusted contacts reachable;
• create a written verification plan: who to call, which official websites to use, and which requests require a second person to confirm;
• make sure a caregiver's access is documented and limited to what the older adult wants.

Do not publish a replacement phone number, email address, or travel plan in the same public profile that exposed the original information. Keep sensitive recovery details out of shared family chats.

When a family member submits the request

The older adult should review the destination, data fields, and message before submission whenever possible. If a representative must act, confirm whether the provider requires written authorization, a legal representative, or a specific form. Do not assume that using the helper's email proves authority or makes the helper the data subject.

Keep a private log with the provider, URL, submission date, response, and the minimum authority record needed to explain the request. Do not store a full identity document in the log unless a qualified professional has advised that it is necessary.

Address and safety programs

If the concern involves stalking, domestic abuse, or a credible physical threat, a commercial opt-out is only one possible layer. Some jurisdictions operate address-confidentiality programs. For example, California's Secretary of State says Safe at Home offers a substitute mailing address to eligible participants and should be used as part of an overall safety plan. Eligibility and covered records vary by program. Contact the administering agency or a victim advocate through a safe channel before changing addresses or public records.

An address change, mailbox, or business address may not be accepted for every government, healthcare, financial, tax, or service-of-process purpose. Confirm the current rule before relying on it.

How OfflistMe fits

OfflistMe can help a user or authorized helper review recorded provider routes and prepare a browser-local draft. The older adult or authorized representative chooses what to send, completes provider verification, and keeps the response evidence. OfflistMe does not verify legal authority, handle Medicare or bank fraud, remove official records, or guarantee a provider outcome.

Frequently asked questions

Will removing a profile make an older adult unreachable in an emergency?

It changes a provider's public or commercial profile, not the contact information held by family, healthcare providers, insurers, or government systems. Before removing a phone or address, confirm that trusted contacts have a safe way to reach the person and that required records remain accurate.

Can I opt out for my parent?

Possibly, if the parent consents or you have another lawful basis to act, but each provider may require a particular representative or verification process. Follow the current first-party instructions and do not assume that a helper's email is enough.

Does an opt-out prevent grandparent or Medicare scams?

No. It may reduce one public source of information, but scammers can use information from other sources, impersonation, breaches, or facts the family already knows. Combine source-specific requests with verification habits, account security, and official fraud-reporting routes.

How often should we re-check?

Choose a schedule based on the person's risk, provider behavior, public-record changes, and how much support is available. There is no verified universal reappearance interval. Re-check the exact source and preserve the date.

What if the older adult is uncomfortable using the internet?

Use a trusted helper, local library or aging-services support, or a qualified advocate, with the person's consent. Avoid sending identity documents through an unverified service or asking the person to disclose a password to a helper.

Sources

• FTC: What to know about people-search sites
• FTC: Addressing scams affecting older adults
• FTC: Family-emergency scams
• FTC: Avoiding and reporting gift-card scams
• FTC: Refund and recovery scams
• FTC: National Do Not Call Registry FAQs
• DMAchoice: Consumer Choice Tools FAQs
• Medicare: Reporting fraud and abuse
• Medicare: Marketing rules for health plans
• California Secretary of State: Safe at Home
• IdentityTheft.gov

Reviewed August 26, 2026. Re-check provider requirements and official fraud contacts before submitting personal information.

Related guides

• Remove Deceased Person Data from Data Brokers
• Protect a Domestic Abuse Survivor's Address
• How to Stop Spam Calls
• Data Brokers and Identity Theft Risk