Broker profile
BIGDBM
An identity data supplier that links names to postal addresses, emails, phones and devices and sells that linkage into marketing, ecommerce, automotive, real estate, technology, financial services and sports. Operated by PublicNSA LLC of Surfside, Florida. BIGDBM reports clearing removal requests in three days through automated suppression. It also runs two opt-out forms on two hostnames, one per right, and only one of them is on its California filing.
BIGDBM overview
At a glance
- Data published
- Substantial
- Re-listing frequency
- Recurring
- Complaint record
- No public record
- Opt-out friction
- Moderate
- Operator opacity
- Mostly disclosed
- Prior data incidents
- None documented
Each broker is scored 1 to 4 across the six dimensions above; higher means more exposure, and the overall gauge is their average.
What each dimension means
- Data published: how much and how sensitive the personal data they put out.
- Re-listing frequency: how quickly you reappear after opting out.
- Complaint record: the volume and pattern of complaints across BBB, Trustpilot, and Sitejabber. No listing, or a listing with no reviews, counts against the broker.
- Opt-out friction: how hard the removal process is to complete.
- Operator opacity: how hidden the operating company and its principals are.
- Prior data incidents: history of breaches or leaks of the data they hold.
- Sells
Consumer identity data, across seven verticals
- Company
PublicNSA LLC, trading as BIGDBM
- Address
9499 Collins Ave, Unit 509, Surfside, FL 33154
- Phone
- ⚠️ Opt-out form 1
optout.bigdbm.com, Do Not Sell or Share
- ⚠️ Opt-out form 2
optout-sensitive.bigdbm.com, Limit Sensitive Use
- On the state filing
Only the first of the two
- 2024 deletion requests
380,900 received, 380,772 granted, 128 denied
- Turnaround
3 days, mean and median, as filed
Background
Background
BIGDBM sells identity, the link between a person and their contact points, to industries that want to recognise customers and prospects across channels.
- Registrant
PublicNSA LLC dba BIGDBM
- Privacy contact
- Verticals it names
Marketing · ecommerce · automotive · real estate
- And
Technology · financial services · sports
- Scope it claims
US data only, no GDPR-subject data
- Suppression process
Fully automated, by its own account
Identity data is the file that says a given name, postal address, email address and phone number all belong to the same person, so a company holding one of those can recognise you by another. BIGDBM's homepage puts its graph at 200 million+ identities and 5 billion+ verified connections, sold into the seven verticals it names alongside a data marketplace and trial access.
Its California filing carries a written statement, which is unusual. BIGDBM says it's a US-based company that doesn't handle non-US data, that its opt-out and suppression process is fully automated and wired into an internal opt-out database so records are suppressed at source, and that it can process opt-outs at scale for partners. The figures it filed fit that account, with 380,900 deletion requests in 2024, 380,772 granted, at a three-day mean and median.
There are two forms, and only one is on the filing. optout.bigdbm.com covers Do Not Sell or Share and is the URL on BIGDBM's California registry entry. optout-sensitive.bigdbm.com covers the separate right to limit the use of sensitive personal information and isn't on the filing at all. Each form links to the other only from a small footer line, and the privacy policy names both, so the second is findable but easy to miss. BIGDBM's filing reports zero requests to limit sensitive personal information in 2024.
It also denied 128 deletion requests in 2024. The filing doesn't say on what grounds. Refusals at that rate against 380,900 are more likely unverifiable identities or duplicates than anything adversarial, but a request here isn't automatically granted.
Data Published
Data types
Sold to businesses as identity resolution rather than published anywhere. You can't search for yourself here, so the first sign of being in it is a company recognising you that you never gave details to.
Names linked to postal addresses, email addresses, phone numbers, IP addresses and device identifiers
The identity graph tying those contact points to one person or household
Address history, used to keep the linkage current as people move
Job title, property records, purchase histories, browsing history and inferred consumer profiles, per its privacy policy
A sensitive category its privacy policy lists as race, national origin, religion and ancestry, which has its own opt-out
The sensitive category is disclosed, briefly. BIGDBM's privacy policy lists its sensitive personal information as race, national origin, religion and ancestry, sourced from surveys, tracking pixels and other data brokers, and sold to advertising networks, data-linking platforms and email marketing vendors. The second opt-out form says BIGDBM doesn't directly solicit sensitive data but may acquire, process and analyse data that falls into the CPRA's categories. On its California filing it answers No to collecting precise geolocation, sexual orientation, biometrics and reproductive-health data.
Contact
Contacts & links
- Company
PublicNSA LLC dba BIGDBM
- Address
9499 Collins Ave, Unit 509, Surfside, FL 33154
- Phone
- Toll-free (privacy requests)
- Privacy contact
Key links
Deletion is a third form. The two opt-out forms stop sale, sharing and sensitive use. For deletion and right-to-know requests the privacy policy points to a Consumer Rights Requests form at optoutccpa.com, or to privacy@bigdbm.com with the PDF request form attached.
Reputation
Trust signals
BIGDBM sells to businesses, so there's no consumer review trail. The most substantive signal is its own compliance record, which is strong.
FAQ
Q & A
Why are there two different opt-out websites?
Because they exercise two different rights. optout.bigdbm.com stops your data being sold or shared. optout-sensitive.bigdbm.com limits how BIGDBM may use the sensitive subset of what it holds. Completing one does nothing for the other. Our BIGDBM removal guide walks both.
What do the All, Address Only, Phone Only and Email Only checkboxes do?
They scope the first form's request. All covers everything BIGDBM holds against you. The narrower boxes address a single contact point, which stops calls but leaves the rest of the record in play. Unless you've a specific reason to be selective, choose All.
What counts as sensitive personal information here?
BIGDBM's privacy policy lists its sensitive category as race, national origin, religion and ancestry. The second form quotes the wider CPRA definition and says BIGDBM may acquire and process data in those categories without soliciting it. The policy frames this right as one for California residents, but the form accepts any state, so file it regardless.
Is BIGDBM good or bad at handling requests?
Mechanically, good. It reports granting 99.97% of 2024 deletion requests at a three-day median through automated suppression. The criticism on this page is structural. A company that capable has no strong reason to keep a second right on a hostname the state doesn't know about.
Can someone file on my behalf?
Yes. Both forms accept an authorised agent and provide a file upload, capped at 10 MB, for the consumer's signed permission. BIGDBM's policy says it may ask an agent for further documentation, so expect a slower path than filing for yourself.
Take yourself off data broker sites
Redact scans 120+ data broker sites from your device, finds where your details are listed, and submits the removal requests for you. If a broker relists you, it files again.
September 10, 2026 · Both opt-out forms were walked firsthand on August 18, 2026 and this page was written from those screens. Today's re-read of the California registry CSV confirmed the company details, the 2024 request figures, the quoted filing statement and that only optout.bigdbm.com is on the filing. The sensitive-data categories, the toll-free number and the third request form come from the privacy policy dated December 31, 2025. Today's read of the served forms found an invisible reCAPTCHA on the first one that wasn't there in August, and a footer link from each form to the other.