Built in Pembroke, MA
by one person who hates data brokers.
Harbor Scan is part of the Harbor Privacy product family. We build small, privacy-respecting tools for everyday people and small businesses. Scan is the one that goes after the data brokers who quietly sell your name, address, phone, and relatives to anyone with $4.99 and an internet connection.
Why this exists
Search your name in Google. You'll see Spokeo, Whitepages, BeenVerified, MyLife, Radaris, ThatsThem, and a dozen more aggregators showing your age, address, phone, relatives, and former addresses. None of them asked you. Most of them refuse to remove you unless you submit a CCPA "right-to-delete" request with very specific identifying information. Many ignore the first three requests entirely.
DeleteMe charges $129/year. Incogni charges $77.88/year. Both are solid, but both are owned by larger privacy or VPN companies, and both make you trust them with the same identifiers brokers already have. Harbor Scan is the cheaper, smaller, more inspectable alternative: $9.99/mo or $99/yr.
What we actually do
Every Harbor Scan customer goes through the same four-stage loop. We run it once on signup and then on a weekly cadence after that, indefinitely, until you cancel.
scan-confirm@harborprivacy.app (a Resend Inbound address), gets routed to our worker, and Playwright clicks it through the same residential IP. You don't have to forward email or set up filters.verified_removed. If it came back, we file again — automatically. And again. And again.What we send to the brokers
This is the deal: brokers need very specific data to find and delete you. Sending less than that means they'll bounce the request as unverifiable. So every CCPA letter we send on your behalf contains:
- Your full legal name and any aliases you gave us
- Date of birth, if you provided one
- Every email address you want scrubbed
- Every phone number you want scrubbed
- Every physical address you want scrubbed — current and prior
- Names of known relatives or associates, if you provided them (for disambiguation)
- The specific URL of the listing we found on the broker's site
- Harbor Privacy's CCPA agent-authorization reference for your account
This is the entire point of the service. We don't try to be cute about it: the broker has to delete what's on their record, and they can only do that if we tell them what's on their record.
What we don't do
- We never sell, share, or rent your identifiers to anyone other than the specific brokers you've asked us to file against
- We don't use your identifiers for advertising, analytics, profile-building, or AI training
- We don't file a single opt-out before we have your signed CCPA agent-authorization on file — the engine literally refuses, with status
blocked_unauthorized - We don't run our scans from a datacenter IP if we can help it. Most brokers block AWS, GCP, and Oracle Cloud by default. We use a residential SSH tunnel back to our own home network so the scans look like a normal human visitor.
- We don't pay for CAPTCHA solvers, residential-proxy services, or commercial scraping bypass tools. If a broker hides behind a Cloudflare managed challenge (looking at you, MyLife) we fall back to an email-only opt-out rather than burn customer money on third-party solvers.
- We don't keep your inbound broker correspondence beyond what's needed to extract a confirmation URL and record proof of receipt.
The honest limits
Some things you should know before signing up:
- Coverage is growing. Three brokers are fully wired today (Spokeo, Whitepages, MyLife). 13 more are scaffolded but disabled — we activate them one at a time after manually verifying that the opt-out URL still works. We don't claim coverage we can't deliver.
- Brokers re-list. Data brokers buy from each other. Even after a successful removal, your record can reappear weeks later from a different upstream feed. That's why the verifier re-scans and re-files. There is no permanent "done" — only "removed and being watched."
- MyLife is a managed-challenge wall. MyLife sits behind Cloudflare's interactive challenge and our scanner can't currently get past it. We still file the CCPA email opt-out blind — the broker has to act on a properly-formatted CCPA request regardless of whether we could verify they had a listing.
- We're new. Harbor Scan launched in May 2026. We're transparent about that. Bigger competitors have been doing this for years and may have established privacy contacts at brokers; we're building those relationships now.
Trust receipts
This page is the about page. The full privacy policy lives at harborprivacy.com/privacy and our no-logs policy at harborprivacy.com/no-logs. Both have specific sections covering exactly what Harbor Scan stores, sends, and deletes.
Get in touch
Questions before signing up? Email support@harborprivacy.app or hit the contact form on the main scan page. I'm a real person in Pembroke, MA, and I will answer.