The Price of Free: Why You Are The Product (And How to Opt Out)
Most platforms are free because they sell your data. We reveal exactly who is buying your information and how to stop the trade.
"If you are not paying for the product, you are the product." The cliché has become background noise. That's a problem, because the specifics, which platforms sell what, to whom, for how much, are what actually tell you whether to care.
Key Takeaways
- Google's advertising revenue per US user is estimated at $260+ per year. Gmail users are generating that value without compensation.
- California's CCPA created a framework for calculating the monetary value of personal data; courts have used it in class-action contexts.
- Free platforms sell behavioral data, purchase intent, demographic profiles, and direct contact info to advertisers, insurers, employers, and data brokers.
- Once your data enters the data broker network from these platforms, it replicates across hundreds of downstream sites automatically.
- The only reliable way to stop the cycle is source opt-out + downstream broker removal.
What Free Platforms Sell About You
| Platform | Data Sold | Who Buys It | Estimated Annual Value Per User |
|---|---|---|---|
| Gmail (Google) | Email content signals, purchase receipt data, search behavior, location from IP | Advertisers, remarketing platforms, data enrichment (via inference) | ~$260 (Google's US ad revenue per user estimate, 2023) |
| Social graph, political affiliation, religious views, purchase behavior, location history, device data | Advertisers, political campaigns, data brokers via partner APIs | ~$48 per user annually (Meta's US ARPU, 2023) | |
| LinkedIn (basic) | Job title, employer, work history, skills, email, professional network connections | B2B marketers, recruiters, sales platforms (ZoomInfo, Apollo buy LinkedIn-derived data) | ~$30–$80 estimated (professional data commands higher per-record prices) |
| TikTok | Browsing behavior, device identifiers, keystroke patterns, biometric data inferences, contact lists | Advertisers, data brokers, parent company ByteDance | ~$10–$20 per user (lower ARPU but high behavioral data depth) |
| Spotify | Music listening behavior, mood inferences, activity patterns, podcast content consumption | Advertisers, mood-based targeting platforms | ~$5–$10 per user |
| Twitter/X | Political opinions, interests, professional identity, real-time location via posts | Advertisers, political campaign targeting, data licensing to third parties | ~$10–$15 per user (declining post-acquisition) |
These are estimates based on disclosed ARPU (average revenue per user) figures and data licensing agreements where reported. The actual value of your data depends on your income level, purchase history, and the enrichment overlays applied by downstream buyers.
The CCPA Valuation: Your Data Has a Legal Dollar Amount
California's CCPA created a framework that implicitly acknowledges personal data has economic value. Under CCPA § 1798.150, a consumer whose data is involved in a qualifying breach can recover $100–$750 per incident without proving actual damages. That statutory floor reflects a legislative judgment that personal data is worth something concrete.
CCPA also requires that if a business offers financial incentives in exchange for personal data, discounts, free services, loyalty points, it must disclose the estimated value of that data in its privacy policy. This "financial incentive value disclosure" requirement is the closest thing US law has to a formal data valuation framework.
When Google offers free Gmail in exchange for access to your email content signals, that is a financial incentive exchange. The company is required to value the data. Most disclosed valuations are vague, but the structure acknowledges the transaction.
What does this mean for you? It means the law recognizes you have a property interest in your personal data, and that interest has a dollar value that companies are profiting from without explicit compensation.
How to Audit Which Platforms Are Selling Your Data
Step 1: Request your data from each platform.
Under CCPA (for California residents) and GDPR (for EU residents), you have the right to download a copy of all data the platform holds about you. Every major platform has a data export function:
- Google: myaccount.google.com/data-and-privacy → "Download your data"
- Facebook: Settings → Your Facebook Information → Download Your Information
- LinkedIn: Settings → Data Privacy → Get a copy of your data
- TikTok: Settings → Privacy → Personalization and Data → Download Your Data
The export shows you exactly what they have collected. Cross-referencing against what you have consciously shared shows you what they inferred or scraped.
Step 2: Review the platform's privacy policy for "third party sharing" disclosures.
Most privacy policies contain a section listing the categories of third parties data is shared with. "Advertising partners," "analytics providers," and "service providers" are typical euphemisms. Under CCPA, California-resident users can request the specific companies their data was shared with in the prior 12 months.
Step 3: Check if your email or phone is in broker databases.
If a platform shared your contact info with data brokers, you'll find it on people-search sites. Google your email address and phone number in quotes. Presence on broker sites suggests the platform shared or leaked that data.
Step 4: Opt out of data sharing at each platform.
- Google: myaccount.google.com/data-and-privacy → Ad personalization → turn off
- Facebook: Settings → Privacy Shortcuts → See more privacy settings → Off-Facebook Activity → Clear History and disconnect
- LinkedIn: Settings → Data Privacy → Manage your data and privacy
- TikTok: Settings → Privacy → Ads → turn off personalized ads
Step 5: Run a data broker removal pass.
Data that has already entered the data broker network through these platforms won't be recalled by the platforms' opt-out settings. You need to address the downstream brokers directly. OfflistMe generates the removal emails for 300+ brokers in a single pass.
Frequently Asked Questions
Q: Does opting out of ad personalization stop the platform from selling my data?
A: It stops some uses. Ad personalization opt-out typically disables targeted advertising. It usually does not stop the platform from sharing aggregated or anonymized data with third parties, or from data sharing for "measurement" purposes. Downloading your data and reviewing the "third party sharing" section of the privacy policy gives you a more accurate picture.
Q: If I delete my Facebook account, does my data disappear?
A: Facebook's data deletion process takes approximately 90 days for most data. Some data (messages sent to others, certain account activity logs) may be retained for longer. Under CCPA, California residents can submit a formal deletion request to accelerate and confirm deletion. Data Facebook already sold to third parties before deletion is not recalled.
Q: Is LinkedIn safer than other platforms because it's professional?
A: LinkedIn's basic tier is among the most aggressively scraped platforms because professional data (title, employer, direct contact info) commands high per-record prices in B2B markets. ZoomInfo, Apollo.io, and Lusha all derive significant data from LinkedIn scraping. Your LinkedIn profile, even set to "public," feeds B2B data brokers continuously.
Q: How do I know if a "free" tool is selling my data?
A: The telltale signs: no clear business model, requests access to contacts or email content, unusually broad data permissions in the terms of service, or a free tier with no feature limitations (free services that are genuinely monetized on premium tiers, not data, usually have meaningful feature gates). If you can't identify the revenue model, you are the revenue.
You select the brokers. You send the emails. You stay in control.
Understand your privacy rights
Every removal request cites a specific statute. These plain-English explainers show what each law covers and how enforcement actually works.
Related Data Broker Removal Guides
Take back your privacy today
Remove your personal information from data brokers and platforms in seconds.
Remove Your Personal Data NowFrom $5 one-time · 300+ data brokers · No subscription