Building a family privacy stack

The through-you targeting pattern

Brokers don't list you alone. They list you with a "relatives and associates" section that names your spouse, your parents, your adult kids, your siblings, and sometimes your in-laws.

That section is built the same way on most broker sites. A search on your name returns a list of relatives. A search on any one of them returns you. Remove your own record while theirs stays up, and the address is still findable through them.

When someone can't reach you directly, because your address is locked down and your phone is unlisted, they go through the family. Your spouse's name on a public Facebook profile. Your kid's name on a school directory. Your father's name on a property record from a house he sold last year. Each one is a path back to your address and the people who live there.

This is why a personal opt-out alone falls short. The broker page ties your spouse's name to your address. Remove your record and leave hers, and the address stays on her page.

Run the scan on your spouse

Start here, before any other step. Run a free scan on your spouse's name.

Most people know their information is "out there" in the abstract. Seeing broker pages that list their name, your shared address, and your kids by first name is a different thing.

Use that as the opening for the conversation. Show the scan result instead of leading with a lecture. The data makes the point on its own.

The same goes for parents, especially if they live with you, or if your address ever appeared on their tax records, voter registration, or property history. Brokers keep a "previous address" field that runs back many years. Your father's old address from when you lived at home stays in his file.

Spouse social media is the biggest household leak

In our experience, the biggest leak in a household is the spouse's social media.

A locked-down officer with a private Instagram and a strict no-tagging rule still gets identified through a spouse's public Facebook account. Photos at home, kids in school colors, a porch with the house number visible, a holiday post that names the new street. Each one is a marker.

Spouses aren't doing anything wrong here. The problem is structural. Most people post the way they always have, because the platform rewards it and an audience of friends and family is fine for most lives. It stops being fine when one person in the house is a target.

The changes worth making:

Lock the account: Private, approved followers only. Audit the follower list and drop anyone neither of you actually knows. Most lists collect people from old jobs and passing acquaintances.

No location tags or check-ins: Turn the feature off at the operating-system level rather than relying on memory.

No house exteriors, porch shots, or street signs in frame: Even on a private account, a screenshot from inside the friend group can travel.

No school colors, logos, or names in a caption: A kid in a uniform tells a stranger the town and the district.

For the deeper version of this, see the family-targeting topic.

Kids and school directories

School directories are a quiet leak most parents don't audit.

Most public schools publish a class roster, a directory, or an emergency-contact list and hand it to every parent in the class. It usually includes your kid's name, your name as the parent, your address, and a phone number. Some schools caption a class photo with names in a parent newsletter.

The opt-out is a written request to the school, citing FERPA. FERPA is the federal student-privacy law, and it gives parents the right to opt out of "directory information" disclosure, meaning the basic details a school can otherwise release without asking. The school provides a form. You have to submit it for each child, at each school, every year, because the opt-out only covers the current school year.

Sports leagues, scouts, and dance studios aren't covered by FERPA, so they don't have to honor the opt-out. Most honor it anyway when you ask in writing. The same goes for afterschool programs; a written request to the program director usually does it.

If your kid plays a competitive sport with a public roster, the team site probably lists the player's name and number. Coaches and athletic directors can usually shorten a public roster to a first name and last initial when you ask.

The household scan

For a family, run the scan on every household member over 18, plus the household address itself.

Spouse. Adult kids living at home. Parents living at home. Grown children who live elsewhere, because brokers still cross-link them to your record. Anyone whose name has landed on a piece of mail at your address.

Brokers cross-link family pages to yours, so many of the records tied to your address surface under a relative's name rather than your own. The household scan shows which pages those are.

If you're in New Jersey, Daniel's Law lets covered officers, judges, and prosecutors demand that data brokers remove their home address and unpublished phone number, and it covers immediate family members living in the same household. Each covered person is protected in their own right. A broker that misses the deadline owes $1,000 in mandatory liquidated damages per violation, plus punitive damages when the violation is willful or reckless. For federal judges, the Lieu Act lets a judge and their immediate family demand removal of their personal information, with a 72-hour window for the broker to comply and a civil cause of action if it refuses. For everyone else, the standard broker opt-out covers each family member individually, the same process repeated per person.

Talking to your spouse

A few patterns that work, in our experience.

Lead with the scan result, not a lecture: Show them their own name on a broker site, the address listed next to it, and the relatives section that names your kids. Let the data carry it.

Keep it about the household, not the job: The exposure covers everyone at the address, not only the officer. Frame the cleanup as a family decision rather than a favor to your career.

Don't catastrophize: Most spouses already worry about the work. "We can fix this" lands better than "this is dangerous."

Name the trade-off: A locked-down account means fewer public life updates for extended family. That's a real cost. Offer the workaround: a private group chat, a closed Signal group, a paper card at the holidays. The goal is to move the broadcast off public platforms, not to silence anyone.

Revisit it: New platforms, new schools, new sports, and new family events all reopen the gap. Recheck it periodically instead of treating the cleanup as one and done.

Extended family and posts that include you

The grandparent post is a recurring leak.

Your mother posts a picture of the grandkids at Sunday dinner. You're in the background, and the caption names everyone. Public account, hundreds of followers, half of whom you've never met. That post is now a marker.

This is the hardest part of the family stack. You can lock down a spouse's account because you share a home and a threat model. You can't lock down your mother's account, and she isn't going to rework her Facebook settings on request.

What works is a narrow ask: don't post pictures that include you, your house, or your kids' faces. Frame it around the kids' privacy. Most relatives respect a kids-privacy request even when a job-privacy request doesn't land.

Don't ask for everything at once. Pick the rules that matter most and keep the list short: no kids' faces, no house exteriors, no first-and-last names of grandkids in captions. Most older relatives can hold to three rules, not fifteen.

The same goes for in-laws, siblings, and close friends. Set the expectation once, plainly, and leave it there.

What we do for households

We sweep the household, meaning the officer, spouse, parents, and adult kids who live with you, across the data broker sites where families show up. One subscription covers the household, with no per-person charge.

Removing your record while your spouse's stays up doesn't fix the exposure, because the brokers cross-link the records. The household has to come off together.

Run a free scan for everyone in the house. The result shows the size of the cleanup. From there we keep checking and refile when a record reappears or a new site lists you, which is the part that doesn't scale by hand.