Adversaries¶

The adversary here is not a figure but a supply chain. Value moves along it: one party collects, another joins and enriches, a third buys and acts. Naming the parts by their position in that chain is more use than a cast list, because the same firm often sits in several positions at once, and the harm lives in the flow rather than in any single actor. No one link has to intend the outcome for the chain to produce it.

The first-party collector¶

The site, app, shop, or service a person actually chose to deal with. The relationship is real and usually wanted: the map gives directions, the parcel arrives, the article loads. That is the cover. Collection beyond what the service needs rides along inside a transaction the person did mean to make. The first party is rarely the one that profits most from the data it gathers. It is the on-ramp, and often it has simply installed someone else’s collection code and forgotten it is there.

The platforms¶

The walled gardens of search, social, video, and marketplace, which collect at scale on their own inventory and act on it in the same place. Because they hold both the identity and the auction, the data need never leave the building to earn. Their durable advantage is the logged-in account: an identifier the person maintains, updates, and carries from device to device without being asked to. The Digital Markets Act’s limit on combining data across a gatekeeper’s own services aims squarely at this position, which is a fair indication of where the concentration sits.

The adtech middle¶

The plumbing few could name. Demand-side and supply-side platforms that run the bidding, data-management platforms that store and slice audiences, and identity-resolution firms, LiveRamp among them, whose entire business is the join key. This layer almost never touches a person directly and appears in no policy anyone reads, and its invisibility is not incidental. Much of the actual trade happens in this layer, one step removed from anyone who could object to it.

The embedded collector¶

The operators of the SDKs bundled inside ordinary apps, gathering under the app’s brand and shipping the results elsewhere. They differ from the platforms in a way worth stating: a person has no relationship with them, no account, and no means of seeing them at all. The weather app is known; the three analytics and location kits inside it are not. Invisibility is the whole of their position.

The brokers¶

Firms whose product is the assembled profile. Acxiom, the marketing arm of Experian, and a long tail of smaller houses buy, match, enrich, and resell, sitting behind opt-out mechanisms that are hard to find and harder to finish. The people-search sites are the same trade with a shopfront, retailing to anyone with a card what the wholesale market moves in bulk. Location brokers are a distinct branch, dealing in movement pulled from app SDKs and sold with its origin filed off. Turning that filed-off movement back into a named individual takes no further purchase, only auxiliary data and a matching technique.

The buyers¶

Everyone the profile is sold to so they can act on it: advertisers and the marketers who run the campaigns, insurers pricing risk, employers screening applicants, lenders and landlords scoring them, political campaigns carving up an electorate. Collection is upstream and abstract; the consequence lands with the buyer, when a segment becomes a premium, a rejection, or a message that knows more than it was told. Not every buyer is an institution: the customer for a people-search report is sometimes an ex-partner looking for an address. And one buyer is not a business at all.

The state as customer¶

One actor on the market is not in it for money. What a state cannot lawfully collect it can buy at the going rate, alongside any advertiser, and the same feeds that price a trainer advert can place an official at a building. Here the state is a customer rather than a watcher, and the purchase answers to procurement rules rather than to the law that governs collection. That difference is the whole attraction.

No single hand¶

The design feature of the chain is that no one holds the whole of it. The collector can say it only gathered, the broker that it only matched what it bought, the buyer that it only used what was offered. Each link is defensible on its own, and the harm is assembled from parts that each look harmless, which is also why holding any single party to account for the result is so hard.

Last reviewed: 2026-07-17.