A phone call can get you to a data broker's privacy team, but the actual request should be written and sent through a verified channel. That creates a record you can save, correct, and use if the company does not respond.

A data broker may hold a profile linked to your phone number. It could include contact details, public-record information, marketing attributes, or inferences. It may not include carrier call logs, text messages, or location history.

Don't begin by accusing a broker or mobile carrier of selling your records unless you have evidence. Ask what data the company holds, where it came from, and which privacy process applies.

Your call has one job: find the right channel. Keep it narrow.

Work out whether the issue is a broker or your carrier

Data brokers and mobile carriers handle different kinds of information. A broker generally cannot change a setting on your phone account, while a carrier cannot necessarily remove a profile held by an outside company.

An unwanted call or text is not proof that a particular broker sold your number. Treat it as a lead, not a conclusion.

For California-related searches, the California Privacy Protection Agency's data broker page can be a useful starting point for registered-broker information. Registration does not prove the company has a file about you.

Phone script to reach a data broker's privacy team

Call a number published on the broker's own website. Avoid phone numbers in ads, random directories, or unexpected emails.

Thing is, many call-center agents cannot process a privacy request themselves. They can still give you the correct form, email address, verification instructions, and a reference number.

"Hello. I want to make a privacy request concerning a consumer profile that may be linked to me. I am seeking [access to my data / deletion of eligible data / an opt-out]. Please tell me the official privacy-request form or email address, the verification information you require, and how I can obtain a reference number. I will submit my matching details through the channel you specify."

If the agent says requests must be made online, do not argue. Say this instead:

"That is fine. Please give me the current privacy-request web address or email, the name of the team handling it, and a reference number for this call."

Write down the date, time, representative's name, and case number. A short note is usually more useful than an unverified recording.

Pick the request before you call

A vague request can slow everything down. Decide what you actually want from the broker.

Script for an access request

Use this when you want to see what the company has before asking for deletion.

"I want to request access to personal information associated with me. Please tell me the categories of data you hold, the sources of that data, and the identifiers you need to locate my record. I will provide matching information through your official privacy process."

This can help you distinguish a real broker profile from a mistaken identity match.

Script for a deletion request

Use this when you want eligible personal information removed.

"I am requesting deletion of personal information associated with me, subject to any applicable legal exceptions. Please explain the verification steps, confirm the scope of the deletion when it is complete, and identify any information you must retain and the reason for retaining it."

Deletion requests are not always absolute. A company may need limited information for security, fraud prevention, legal compliance, or to remember an opt-out preference.

Script for a California sale or sharing opt-out

California residents may also ask to opt out of the sale or sharing of personal information under the CCPA and CPRA.

"I am a California resident and want to submit an opt-out request for the sale or sharing of my personal information. Please direct me to your official process and tell me what information you need to verify and match my request."

Do not claim California rights if you are not making a California resident request. State the facts plainly and let the company identify its applicable process.

Ask your mobile carrier a different question

A mobile carrier may hold account details and network-related information that a data broker does not have. Keep that request separate from a broker complaint.

"I am calling about privacy choices and information linked to my mobile account, not a billing question. Please transfer me to the team that handles customer privacy or account information. I want to know what sharing controls apply to this line and how to submit a written privacy request or complaint. Please provide a reference number."

Do not provide your account PIN, full Social Security number, or photo ID during an unexpected call. If verification is required, use the carrier's official account portal or a secure process it identifies on its website.

Avoid saying, "You sold my call logs," unless you have documents supporting that claim. Ask for the policy, the sharing control, and a written response instead.

Follow up in writing while the call is fresh

A verbal request can be hard to prove later. Send a concise request through the broker's official privacy form, portal, or confirmed email address.

When you write the follow-up, include enough matching detail for a real search but not the whole contents of your wallet, because the aim is to prove you are the requester without handing a stranger a second set of credentials that could cause a much worse problem.

Subject: Privacy request for personal information associated with [your name]

Hello,

I am submitting a request to [access / delete / opt out of sale or sharing of] personal information that your company may hold about me.

Please search for records associated with the identifiers I provide through your secure process, including my name, current or former address, email address, and phone number where relevant.

For an access request, please identify the categories of personal information held about me and the sources of that information.

For a deletion request, please delete eligible personal information and explain the scope of the deletion. If any information is retained, please identify the category and the reason.

Please reply to [your email address] and provide a reference number for this request. Let me know if additional verification is required.

Sincerely,

[Your name]

Make the first request plain. You can add details later.

If you live in the UK or European Union, do not assume a U.S. script gives you the right wording for an erasure request. The UK Information Commissioner's Office guidance on erasure also recommends following a verbal request in writing. That is sensible evidence practice, but it does not set U.S. law.

California residents can use DROP for registered brokers

California's Delete Request and Opt-out Platform, known as DROP, is separate from a broker's individual privacy form. It is designed to give Californians one place to submit deletion requests to registered data brokers.

The CPPA's DROP page says that, starting August 1, 2026, data brokers must access the platform at least once every 45 days to begin processing deletion requests. The same page warns that it can take up to 90 days for a status update to appear.

DROP is not a universal delete button. It does not automatically resolve a complaint about your phone carrier, bank, employer, retailer, or a company that is not a registered data broker.

A direct request can still be useful when you need an answer from one specific company. Save the confirmation from both processes if you use them.

Escalate a complaint when the response raises a concern

The Federal Trade Commission complaint process and a deletion request serve different purposes. A complaint does not itself force a broker to erase a profile, and it does not establish that a company sold your phone records.

Use this order when a broker's response is missing, misleading, or inconsistent with its privacy policy:

1. Submit the broker's official request and save the confirmation page, emails, and case number.
2. Write down specific facts: the broker's name, the date of contact, what you requested, what the representative said, and any privacy-policy language that conflicts with the response.
3. Report suspected deceptive or unfair conduct through ReportFraud.ftc.gov. Describe what happened without guessing about data sources you cannot verify.
4. For a carrier-related concern, use the carrier's official privacy or complaint channel separately. Include the account reference number and copies of its written response.
5. Keep checking for replies through the contact method you provided. Do not send repeated requests that change your facts or identifiers.

The FTC report is still worth making when a pattern looks troubling. It is not a substitute for the broker's own privacy-request process.

Keep a simple evidence file

A small record can make follow-up much easier.

Use a password-protected folder if the file contains identification documents. Do not email sensitive IDs unless the company's verified process specifically requires them.

Do not weaken your request with the wrong legal claim

To be honest, a long legal threat often gives customer service something to debate instead of something to process.

The FTC Act is not a personal, nationwide delete-your-data button. Likewise, 16 CFR Part 313 is not a universal data-broker deletion rule. You do not need to cite either one to ask a company for its privacy process.

California's CCPA and CPRA may matter for a California resident's request. GDPR is not a catch-all phrase for U.S. callers. A broker can still accept a voluntary deletion or suppression request from someone outside California, but its policy and any applicable state law may control the result.

Start with one company that you can identify. Make the short call, get the official privacy channel, submit the written request, and set a reminder to check the response and your saved case number.