How to See What Companies Know About You

You have a legal right to ask almost any company to show you the personal data it holds about you, and doing so is eye-opening. The tool is called a data subject access request, and paired with a few built-in download features, it lets you run a genuine audit of your digital self: what companies have collected, how they use it, who they share it with, and where they got it. Here is how to see what companies know about you, and an honest note on why seeing it is only half the job, since knowing what is out there and actually removing it are two different things.

What is a data subject access request?

It is a formal request asking an organization to confirm whether it holds your personal data and, if so, to give you a copy along with details about how and why it processes that data. In the United States, this right to know comes from state privacy laws such as California's, which is why it is available to a growing share of Americans. Businesses generally have around 45 days to respond, and they must return the data in a format an ordinary person can actually read. It is one of the most powerful privacy rights available, and one of the least used.

Where should I start my audit?

If your goal is understanding and reducing your footprint, start with data brokers, because their access responses are the most revealing. A broker's answer tells you three valuable things: what data they hold, who they have shared or sold it to, which becomes your next list of companies to check, and the source they got it from, which shows where the chain began. In other words, one access request is reconnaissance that points you to the next. From there, work outward to the major platforms and services you use.

What tools make this easier?

Several big companies build the audit right into your account settings, so you do not always need a formal request:

• Google Takeout lets you download a copy of what Google holds across its services, from search and location history to email and photos.
• Social media downloads. Most major platforms offer a Download Your Information option that packages your posts, messages, and the profile data and ad-targeting categories they have built about you.
• Your credit reports. You can get free reports from the three major bureaus to see the financial profile they maintain, which is worth reviewing for accuracy and fraud as well.
• Broker access requests. Larger data brokers have privacy portals where you can request the report they hold on you, often the same place you later opt out.

What will I probably find?

More than you expect, and often more than you remember consenting to. Access responses commonly reveal detailed location histories, lists of inferred interests and characteristics used for ad targeting, records of purchases and browsing, and profiles compiled from public records you never submitted. Data brokers in particular tend to hold information gathered without your direct knowledge, which is the whole point of the audit: to replace a vague unease with a concrete picture of who has what. Once you can see it, you can decide what to do about it.

Seeing it is only half the job

Here is the honest limitation. An audit tells you what companies know, but it does not remove anything by itself. The same laws that grant the right to know also grant the right to delete, so the natural next step after seeing your data is to request its deletion, or to opt out of its sale. The problem is scale: your information is spread across dozens or hundreds of brokers and companies, and filing access and deletion requests to each one, then verifying and repeating them as data reappears, is a significant ongoing effort. Knowing where you stand is empowering. Acting on it everywhere, over and over, is the work. Consumer Reports found that automated and do-it-yourself removals cleared only about 27 percent of exposed listings, while removals handled by real people who monitor and refile reached roughly 70 percent. Your rights are explored further in which states let you delete your data.

Frequently asked questions

Is it free to request my data from a company?

Generally yes. Under the state laws that grant these rights, companies must respond to a reasonable access request at no charge, usually within about 45 days. Built-in tools like account downloads and free credit reports are also free, so an audit costs time rather than money.

Do I have this right if my state has no privacy law?

Your enforceable right depends on your state, but in practice many national companies and brokers honor access and deletion requests from everyone, since they apply California-style compliance broadly. Built-in download tools from major platforms work regardless of where you live.

What is the difference between seeing my data and deleting it?

An access request shows you what a company holds. A deletion request asks them to erase it. They are separate rights, so seeing your data does not remove it. Filing an access request first, though, gives you a baseline to confirm a later deletion actually worked.

Why bother auditing if I cannot remove everything?

Because you cannot make good decisions about data you do not know exists. An audit shows you which exposures matter most, where your data spread, and what to prioritize removing, turning a vague sense of exposure into a concrete, actionable list.