About Harbor Scan

Built in Pembroke, MA
by one person who hates data brokers.

Harbor Scan is part of the Harbor Privacy product family. We build small, privacy-respecting tools for everyday people and small businesses. Scan is the one that goes after the data brokers who quietly sell your name, address, phone, and relatives to anyone with $4.99 and an internet connection.

Why this exists

Search your name in Google. You'll see Spokeo, Whitepages, BeenVerified, MyLife, Radaris, ThatsThem, and a dozen more aggregators showing your age, address, phone, relatives, and former addresses. None of them asked you. Most of them refuse to remove you unless you submit a CCPA "right-to-delete" request with very specific identifying information. Many ignore the first three requests entirely.

DeleteMe charges $129/year. Incogni charges $77.88/year. Both are solid, but both are owned by larger privacy or VPN companies, and both make you trust them with the same identifiers brokers already have. Harbor Scan is the cheaper, smaller, more inspectable alternative: $9.99/mo or $99/yr.

What we actually do

Every Harbor Scan customer goes through the same four-stage loop. We run it once on signup and then on a weekly cadence after that, indefinitely, until you cancel.

01 — Scan
We check every covered broker for your record
Playwright (a headful Chromium with anti-detection patches) runs through Spokeo, Whitepages, MyLife, and the rest from a residential IP, looking for any listing that matches your name and location. Each finding is recorded with a confidence score.
02 — File
CCPA opt-outs filed on your behalf
For brokers with an opt-out form we fill it. For email-only brokers we send a CCPA-grade letter signed as your authorized agent under Cal. Civ. Code § 1798.135(c). Every letter cites the statute and includes the full identifier set the broker needs to delete you.
03 — Confirm
We click the verification links
When the broker emails a "click here to confirm removal" link, it lands at scan-confirm@harborprivacy.app (a Resend Inbound address), gets routed to our worker, and Playwright clicks it through the same residential IP. You don't have to forward email or set up filters.
04 — Verify
We re-scan after the broker's window
Once the broker's stated removal window passes (7 to 21 days depending on the broker), we re-scan. If your listing is gone we mark it verified_removed. If it came back, we file again — automatically. And again. And again.

What we send to the brokers

This is the deal: brokers need very specific data to find and delete you. Sending less than that means they'll bounce the request as unverifiable. So every CCPA letter we send on your behalf contains:

  • Your full legal name and any aliases you gave us
  • Date of birth, if you provided one
  • Every email address you want scrubbed
  • Every phone number you want scrubbed
  • Every physical address you want scrubbed — current and prior
  • Names of known relatives or associates, if you provided them (for disambiguation)
  • The specific URL of the listing we found on the broker's site
  • Harbor Privacy's CCPA agent-authorization reference for your account

This is the entire point of the service. We don't try to be cute about it: the broker has to delete what's on their record, and they can only do that if we tell them what's on their record.

What we don't do

  • We never sell, share, or rent your identifiers to anyone other than the specific brokers you've asked us to file against
  • We don't use your identifiers for advertising, analytics, profile-building, or AI training
  • We don't file a single opt-out before we have your signed CCPA agent-authorization on file — the engine literally refuses, with status blocked_unauthorized
  • We don't run our scans from a datacenter IP if we can help it. Most brokers block AWS, GCP, and Oracle Cloud by default. We use a residential SSH tunnel back to our own home network so the scans look like a normal human visitor.
  • We don't pay for CAPTCHA solvers, residential-proxy services, or commercial scraping bypass tools. If a broker hides behind a Cloudflare managed challenge (looking at you, MyLife) we fall back to an email-only opt-out rather than burn customer money on third-party solvers.
  • We don't keep your inbound broker correspondence beyond what's needed to extract a confirmation URL and record proof of receipt.

The honest limits

Some things you should know before signing up:

  • Coverage is growing. Three brokers are fully wired today (Spokeo, Whitepages, MyLife). 13 more are scaffolded but disabled — we activate them one at a time after manually verifying that the opt-out URL still works. We don't claim coverage we can't deliver.
  • Brokers re-list. Data brokers buy from each other. Even after a successful removal, your record can reappear weeks later from a different upstream feed. That's why the verifier re-scans and re-files. There is no permanent "done" — only "removed and being watched."
  • MyLife is a managed-challenge wall. MyLife sits behind Cloudflare's interactive challenge and our scanner can't currently get past it. We still file the CCPA email opt-out blind — the broker has to act on a properly-formatted CCPA request regardless of whether we could verify they had a listing.
  • We're new. Harbor Scan launched in May 2026. We're transparent about that. Bigger competitors have been doing this for years and may have established privacy contacts at brokers; we're building those relationships now.

Trust receipts

This page is the about page. The full privacy policy lives at harborprivacy.com/privacy and our no-logs policy at harborprivacy.com/no-logs. Both have specific sections covering exactly what Harbor Scan stores, sends, and deletes.

"A privacy service that logs your data is not a privacy service. We designed our infrastructure from the ground up to collect as little as technically possible while still delivering the service."

Get in touch

Questions before signing up? Email support@harborprivacy.app or hit the contact form on the main scan page. I'm a real person in Pembroke, MA, and I will answer.

Start Your Free Scan →

MORE FROM HARBOR PRIVACY

Adblock — block ads on every device · Fax — send a fax anonymously · Money — budget without bank login · Booking — staff scheduling · Career — AI resume + cover letter · Scan — remove your name from data brokers