50% off Annual Plans + Extra 30% off - from US$58.72 Per Year @ Protect My Data

60
JULIAN

If you've ever used sites like https://haveibeenpwned.com/, you probably know that your account information has been exposed in data breaches across different websites.

I've had the same Gmail account since it was still in beta, so naturally, I've used it on a lot of websites over the years — dating all the way back to when I was a kid. As you can imagine, that has resulted in a pretty substantial amount of spam and scam emails over time. This was before a time when we had things like SimpleLogin or Bulc Club to hide your mailbox.

The obvious solution would be to abandon the account completely, but there's way too much sentimental value attached to it, not to mention all the services and automations I've configured on it over the years. Instead, I've been trying to clean it up and keep it as private as possible.

Recently, I started using Protect My Data, and so far, it seems to be doing a pretty good job of removing my personal information from the internet. Interestingly, the username and password side of things isn't really what concerns me. I use unique, randomly generated passwords through a password manager, and I don't even use most of those old accounts or services anymore anyway. What I actually care about is the personal information that's out there — things like my name, address, date of birth, and other identifying information.

Obviously, once your data has made its way onto the internet, you're never going to completely erase it. It's already out there, and there's no guarantee that every copy can be found or removed. But I think there's still value in reducing how much of your personal information is publicly available. At the very least, tools like this can help reduce your attack surface and make it harder for someone to piece together information about you.

Combined with SimpleLogin and a few automations I've set up using Google Apps Script, my Gmail inbox is now cleaner than it has ever been. I regularly reach zero inbox, and I barely get any spam anymore, maybe one every 6 months or something. I don't even get scam calls these days — the ones that do come through are automatically screened and blocked.

Personally, I went with the Pro plan, which comes to $204.03 NZD per year after applying a coupon code. I only plan on using it for a year, so for me, it's more of a one-time cleanup rather than an ongoing expense.

Note that if you own multiple emails, you can add them under the same Protect My Data account.

Related Stores

protectmydata.com
protectmydata.com

Comments

Search through all the comments in this post.
  • I've had the same Gmail account since it was still in beta, so naturally, I've used it on a lot of websites over the years — dating all the way back to when I was a kid. As you can imagine, that has resulted in a pretty substantial amount of spam and scam emails over time. This was before a time when we had things like SimpleLogin or Bulc Club to hide your mailbox.

    SneakEmail (as an example of an email aliasing service) was around long before GMail - late nineties if I recall correctly. It used to be free, but I moved off when they started charging.

    I've had a Hotmail address since before Microsoft took it over - registered sometime in 1997 I think, so that address has been around for nearly thirty years in constant use, and to my great surprise, almost no spam gets into it, and I never seem to get anything legitimate blocked (hard to be sure about that of course, but its been many years since someone chased me up about an email due to not making it through to me), so I think the issue very much depends on who is looking after your email.

    Having said that, when SneakEmail ditched their free offering, I just moved to using my own dedicated domain for aliases, which costs me (now) about $27 a year, and gives me unlimited aliases and more importantly, completely control with essentially no management required.

    Having said that, $200 for, as you put it, a one-time cleanup isn't bad value if they actually deliver. How will you assess its effectiveness?

    • I didn't know about SneakEmail, but I suppose there were lots of things I didn't know as I was so young back then. Anyway, email address was just an example, the other information like name, address, DOB, IP addresses etc are more important to me to remove.

      The way Protect My Data works is it goes onto broker sites and request for the removal of your information. So in order to assess the effectiveness, I typically just do a search on Google or whatever, using some of my personal information. If I see the list has of entries have shrunken down, that's a good sign.

      Of course, this doesn't remove your info from leaked/hacked databases, but at least it reduces the footprint somewhat. You're basically paying for a service that does the manual and tedious task of requesting for broker sites to remove your data, or for you to be opt-out of their data collection. The name "Protect" My Data isn't really protecting, it's really just doing a lot of monitoring, reporting, opt-out tasks. I think it does help and make a difference in the long run.

      Having said that, it's not like I get spam regularly to begin with. Gmail does a good job with their algorithm at detecting spam and they barely make it into the inbox. Maybe you'll find a spam mail from another Gmail account, but not something @dodgywebsite.com. And maybe I'll get like one of those maybe every 6~12 months. So maybe having my info like my name and DOB on the internet doesn't affect any of this, but I'd still like to think it's better to remove them. Paying $200 to do a job that I would either spend hours manually working on, or at least 1~2 hours scripting to automate the process, is worth it. My time is more valuable than the $200.

      • You'd know more than me, but surely the number of results on a Google search would be dropping anyway as Google reduces the amount of websites it indexes.

        • It'd be mostly due to SEO. If you pay Google to rank your website, it'll be more visible to the users who browse on Google. But you're right in a way, as Google is using AI to query information from websites and "forcing" people to stay on Google instead of navigating to the websites directly. Think of cases like when you're looking for restaurants around you and you can see all the relevant information directly on Google, such as business number, address, menus, reviews, etc. In some ways, people not navigating to the websites anymore could mean they may lose money on adsense, or some other monetization methods they've got going on.

  • Basic plan is US$58.72 with the 50% off offer + promo code

  • It might be worth running the free optery tier first to see if there is actually anything to remove. A lot of the legal data broker business seems heavily focused on US consumers due to different privacy laws. I don't think any of the services can really help you with illegal sources- I understand that actual data leaks are a completely different problem.

    And they all seem to run constant promotions, which makes it hard to compare actual prizes. I think they are all around that ball park, so it might be worth comparing their own privacy/safety with other services like inkogni, crabclear, optery, aura (seems pretty overkill for NZ anyways as many of the features don't apply if you are not in the US) etc.

  • I saw a YouTube video taking about those site that suppose to help you erase your data: is it actually doing anything?
    Think of the broker perspective: they never ask your permission to get your data. They never ask anyone. It cost them the infrastructure to get yours via scraping but after that it's free money. Why would they delete your data just because you or the third party ask to delete?
    In US they have a some "for show" law about privacy that pretty much do nothing. EU have GDPR that have a bit more power. But then anything that is not those 2: why would they even care about your request when they can sell for money without your consent anyway??

    • A lot of sites do comply.

      I've mentioned that your data doesn't actually get fully removed. Once it's on the internet, it'll likely stay there forever. But it doesn't mean that you can't try to reduce the footprint as much as you can.

      Probably not the best analogy but the best one I can think of right now. On NZTA's website, you can choose to opt out of 3rd party's access to your data. It works for some companies, but not all of them. For example, Wilson Parking can still get access to your data and issue you a ticket. As you might know, they're notorious for issuing tickets to people unfairly, there's a lot of complaints and negative sentiment about them. Anyway, just because some companies can still access your info, doesn't mean you shouldn't opt-out right?

      Anything can collect your data these days. Got an Android phone and running anything instead of GrapheneOS? Using Play Services and Play Store? Your data is logged. Using Linkedin, Facebook, Instagram, etc? Data logged. Using Windows? Data logged, even if you turn off telemetry collection in the settings.

      Unless we live in the mountains in complete isolation from society, chances are we'll have some data exposed on the internet (even if it's just a name) one way or another. But it doesn't mean it's pointless to try and protect your identity as much as you can, even if it may seem meaningless.

      • My point is more about: should you spend $200 without knowing how much value does it bring you? And knowing that they have no incentive to do what you ask. The more they listen to you the less days they have, the worst is their reputation toward their client, which is Not you !

        Nzta is a government entity. Your data broker is ran by who?

        • You have to be willing to place a certain level of trust in these kinds of services. That's true of almost every privacy-related service, really. But if they genuinely had no incentive to follow through on what they claim to do, then services like Protect My Data wouldn't be much of a viable business in the first place. I'd imagine they'd receive a lot of complaints from customers if their service consistently did nothing.

          If you're confident that these services don't actually provide meaningful results, I'd be interested in seeing some concrete examples or evidence to support that. Otherwise, isn't that just an assumption?

          I could make the same argument you're making about services like Bitwarden. You're trusting a third party to store your passwords, credit card details, addresses for autofill, and potentially a lot of other sensitive information. They could have a security incident, get hacked, mishandle your data, or fail to live up to their privacy and security promises. By that logic, shouldn't you avoid services like Bitwarden entirely and run your own self-hosted password manager such as KeePass? That would give you much more direct control over your data. But there's always a trade-off between privacy, security, convenience, usability, accessibility, performance, and the amount of effort you're willing to put in. Some security professionals and extremely privacy-conscious people still choose to use services like Bitwarden because, for them, the benefits outweigh the additional trust they're placing in a third party. Even people who work in industries where security and privacy are extremely important, such as banking, don't necessarily eliminate every third-party service from their lives. They still make risk-based decisions about what they're willing to trust and what they're not. I've worked at a large bank before and they're happy to use Bitwarden across the board.

          That's essentially the point I'm making with Protect My Data. I'm not saying you should blindly trust them or assume they can magically erase your information from existence. I'm saying that, at some point, you have to decide what level of trust and risk you're comfortable with, and whether the benefit you're getting is worth it.

          I think the bigger point is that people have very different expectations when it comes to privacy. Some people take it to the extreme and try to eliminate their exposure as much as possible. They avoid social media, use privacy-focused operating systems, avoid services with extensive telemetry and tracking, and so on. Other people aren't willing to go that far and are comfortable giving up some degree of privacy in exchange for the convenience and benefits that certain products and services provide.

          Based on your comments, I'd assume you're fairly sceptical of services like this and probably place a relatively high value on your privacy. But I'd also assume that you still use some products or services that collect information about you in some way. If so, you've already made the same kind of trade-off: you're placing some level of trust in those companies, or you've simply decided that the benefits they provide are worth giving up some privacy.

          From my own experience using Protect My Data, all I can say is that the amount of my personal information that is publicly available and easily searchable on the internet has decreased, although it wasn't particularly extensive to begin with. It obviously hasn't disappeared completely. If someone were to obtain leaked databases from the dark web, for example, there's a good chance they'd still find some of my information. But there's a meaningful difference between information existing somewhere in a leaked database and that same information being easily discoverable through a normal Google search.

          And that's really what I'm paying for. If I can manually submit an opt-out request to a particular data broker, then a service like this is essentially automating that process for me. Whether every individual broker actually honours those requests and removes everything they have on me is something I can't independently verify. But I also can't guarantee that I'd get a better result by spending hours doing the exact same process myself.

          At the very least, I'm saving my own time. And that's where I think the value proposition comes in.

          Obviously, your mileage may vary. I'm only speaking from my own experience, and in my case, I think the service has worked reasonably well for what I wanted it to achieve. I'm not claiming it can completely erase my data from the internet, because I don't think any service can realistically promise that.

          As for the $200, I'm personally more than happy to pay it. It's a pretty small amount of money to me, and I know I could make considerably more than that during the amount of time it would take me to manually go through all those opt-outs, or build and maintain a script to automate it myself. For me, the convenience and time savings alone make it worth the cost.

  • "Hooray, no spam here!"

Login or Join to leave a comment