Broker profile
IDStrong
An identity protection subscription selling dark web monitoring, breach alerts and a paid data broker removal service. It's run by InfoPay, Inc. of Boston, which files it on one California data broker registration with InfoTracer and eleven other domains. So the company selling removal from brokers is registered as one, and its own opt-out page says its services give access to public records that may include you. Removal is one short form asking for your name and email.
IDStrong overview
At a glance
- Data published
- Moderate
- Re-listing frequency
- Occasional
- Complaint record
- Mixed
- Opt-out friction
- Moderate
- Operator opacity
- Fully disclosed
- Prior data incidents
- None documented
Each broker is scored 1 to 4 across the six dimensions above; higher means more exposure, and the overall gauge is their average.
What each dimension means
- Data published: how much and how sensitive the personal data they put out.
- Re-listing frequency: how quickly you reappear after opting out.
- Complaint record: the volume and pattern of complaints across BBB, Trustpilot, and Sitejabber. No listing, or a listing with no reviews, counts against the broker.
- Opt-out friction: how hard the removal process is to complete.
- Operator opacity: how hidden the operating company and its principals are.
- Prior data incidents: history of breaches or leaks of the data they hold.
- Category
Identity monitoring · data broker removal service
- Operating entity
InfoPay, Inc.
- Founded
2015, per IDStrong's own schema markup
- Headquarters
227 Lewis Wharf, Boston, MA 02110
- Opt-out
- Opt-out shape
One form with full name, email and a reCAPTCHA
- Who can opt out
Anyone. The form has no state gate
- Filing
A DBA on InfoPay, Inc.'s California registration, one of 13 domains
- FCRA covered?
No, per InfoPay's filing
Background
Background
IDStrong is the consumer brand. InfoPay, Inc. is the data broker behind it, and IDStrong's own pages say so.
- Registrant
InfoPay, Inc., Boston MA
- Domains on the filing
13
- 2025 deletion requests
29,004 across InfoPay's brands
- Complied with in full
28,683
- Denied
321
InfoPay's California registration covers thirteen domains, among them infotracer.com, recordsfinder.com, entitycheck.com and idstrong.com, and IDStrong is in the filing's own list of DBAs.
InfoPay publishes its request figures for the whole company rather than by brand. For 2025 it reports 29,004 deletion requests, 28,683 complied with in full and 321 denied, on its privacy page.
Ownership is easy to confirm here. The schema markup on IDStrong's pages names InfoPay Inc as its parent organization, with the same Boston address as the filing and a founding date of 2015, and the privacy policy says InfoPay provides the IDStrong services.
The removal service and the brokers are one company. IDStrong sells a service that clears your details from data broker sites, while its parent runs lookup sites such as InfoTracer under the same registration. Nothing published says a subscription clears you from InfoPay's own brands, and each one runs its own opt-out.
Data Published
Data types
IDStrong doesn't publish a profile page about you. What it holds is what it gathers for its scans and monitoring, and its privacy policy says that includes public records about people who've never used it.
Public records matching what users search for, which the privacy policy says it gathers about "users and non-users"
Name scans, which take any first name, last name and state
Breach and dark web exposure records tied to an email address, from the free scan and the paid alerts
Phone number exposure lookups
Home title, medical ID and financial account monitoring data for subscribers
The form's own limit. It says "We will remove your personal information from our systems. However, we cannot remove compromised data that may already exist on the dark web." Opting out clears IDStrong's records, not the breaches it reports on.
Contact
Contacts & links
- Operating entity
InfoPay, Inc.
- Registered address
227 Lewis Wharf, Boston, MA 02110
- Privacy contact
- Support
- Phone
- Filed compliance contact
- Filed phone
Key links
The registry's link lands on policy text. California's registry points this domain at members.idstrong.com/opt-out/, a Your Privacy Choices page whose "use the form HERE" link opens a separate request form run through OneTrust. The footer form carries the removal fields itself, and it's the route our guide walks.
Network
Sister brands
One registration, thirteen domains, and no published suppression that crosses them. Opting out of IDStrong doesn't opt you out of the lookup sites its parent runs.
Treat every brand as a separate removal. InfoPay publishes nothing to say a suppression on one domain reaches the others. If the lookup sites are what exposed you, start with InfoTracer.
Reputation
Trust signals
IDStrong's own Trustpilot profile, claimed in 2020, averages 4.1 from 70 reviews. The BBB keeps no separate file for the brand, and a search for IDStrong returns InfoPay's Boston file, which the BBB now lists under the GoodCar name.
FAQ
Q & A
How do I remove my information from IDStrong?
Use the form at idstrong.com/do-not-sell-share-my-personal-information/, linked from the footer of every page. It asks for your full name and email address, has an optional message box, and needs a reCAPTCHA before Submit Request. Our IDStrong removal guide walks it.
Is IDStrong a data broker or a privacy service?
Both. It sells identity monitoring and a paid data broker removal service, and InfoPay, Inc. files it on its California data broker registration beside twelve other domains, including InfoTracer.
Is /remove-my-information/ the opt-out?
No. That page sells IDStrong's paid Data Broker Removal Service, which works on other companies' sites. Use the footer form to be removed from IDStrong itself.
Does opting out of IDStrong cover InfoTracer and the other InfoPay sites?
Nothing published says it does. Each of InfoPay's brands runs its own opt-out, so treat every one that lists you as a separate removal.
Will opting out delete my leaked data from the dark web?
No. The form itself says "We will remove your personal information from our systems. However, we cannot remove compromised data that may already exist on the dark web."
Take yourself off data broker sites
Redact scans 120+ data broker sites from your device, finds where your details are listed, and submits the removal requests for you. If a broker relists you, it files again.
September 10, 2026 · Ported from the August 18, 2026 write-up, whose walk of the opt-out form left one screenshot. Checked again today against the opt-out page, the privacy choices page on IDStrong's registry entry, the privacy policy dated August 20, 2026, the homepage schema markup, the state registry and InfoPay's 2025 request figures, plus Trustpilot, the BBB and SmartCustomer, which supplied the review ratings.