You, point by point.

Public records.

Business filings, licenses, court records, and permits each attach your name to addresses and activities, permanently and searchably. Court dockets, corporate registrations, licenses, and permits publish names, addresses, and case details, increasingly in searchable portals. Aggregators scrape them into unified profiles. Systems built for transparency now feed people-search sites wholesale. Registering an LLC with a registered-agent address keeps future filings from planting your home address in public.

Known systems / PACER · OPENCORPORATES

Every record is harmless alone. Together they are a dossier with your name pre-filled.

Your face.

Recognition systems built on scraped public photos match faces to names at scale. Every public photo of you grows the index that searches you. Recognition systems index faces scraped from social media and news pages, the wider public web too, then match uploads against the index. Accuracy is high enough for police workflows. Clearview settled with the ACLU over Illinois biometric law and restricted private sales; PimEyes remains open to anyone. Reverse-search your own photos to see what a stranger’s search returns.

Known systems / CLEARVIEW AI · PIMEYES

You cannot rotate your face like a password, and it is already enrolled.

Your home.

Deeds, voter rolls, and utility hookups publish the tie between your name and your address with official weight. It is the anchor record people-search sites build on. Deeds and assessments tie your legal name to a parcel with official authority, voter rolls alongside, and most counties publish online. People-search profiles anchor here. Broker removal suppresses the copy, never the source. Titling through a trust or LLC is the durable fix, and it only works before the deed records.

Your address is the fact every other fact wants to attach to.

Your voice.

Assistants ship audio to the cloud and call centers verify by voiceprint, while seconds of recorded speech can model a voice. You publish it every time you speak on camera. A few seconds of audio yields a voiceprint that matches you across calls, and modern cloning needs little more to speak as you. Banks and agencies verify by voice at scale. Voice-clone scams against families are documented and growing. Treat an urgent voice on the phone as unverified until you call back on a number you control.

Known systems / PINDROP · NUANCE

Your voice is a biometric you give away every time you leave a voicemail.

Your watch.

Watches and fitness bands log heart rate, sleep, workouts, and routes. Where that data leaves the ecosystem through apps, it enters the broker economy like everything else. Wearables log heart rate, sleep stages, workouts, GPS routes, and increasingly ECG and blood oxygen. The data lives in vendor clouds under consumer terms, outside medical privacy law. Strava’s public heatmap famously outlined military bases from soldiers’ runs. Fitness data is location plus health data, and the sharing defaults deserve a hard look.

Known systems / FITBIT · STRAVA

Data about your body is the most intimate class there is, and it flows on app-store terms.

Where you go.

Phone trails, car reports, plate readers, and transit records merge into a pattern of life: where you are and when, on repeat. No one system holds it all. Together they do. Pattern-of-life analysis merges phone pings, plate reads, transit taps, and purchases into a routine: home, work, gym, worship, and the exceptions. The exceptions are the intelligence. Brokers sold cell-derived visits to clinics and places of worship until regulators moved. No single feed matters like the join, which is why cutting the cheap joins works.

Known systems / FOG REVEAL · FLOCK SAFETY

A pattern of life is the finished product every tracker on this map is selling parts of.

Your phone.

The richest single node in the web and the one fully under your control. One hour of hardening quiets most of it. One device carries your identifiers, credentials, location, and conversations, and most of its leaks are settings. The phone checklist closes them in about an hour. Hardening the phone cuts more threads on this map than any other single act. It is the highest-return afternoon in privacy defense.

The device that leaks the most is also the one you can fix this afternoon.

Your family + dna.

Family tree sites and shared addresses leak you through the people around you, and consumer DNA databases go further. Familial matches have identified people who never took a test. Consumer DNA databases enable familial matching: a relative’s test can identify you to investigators or researchers. Shared addresses and tagged photos do the same with less science. The Golden State Killer identification ran through a relative’s GEDmatch upload, and the technique is now routine. Your exposure includes decisions other people made.

Known systems / ANCESTRY · GEDMATCH

You can go dark and still be found through people who never tried to hide.

Old leaks.

Accounts you forgot and breaches you never heard about keep old passwords and photos in circulation, identity data included. Decade-old data still opens doors. Breach data circulates for decades through dumps and combo lists, then resale. The National Public Data breach spilled Social Security numbers at national scale before the company folded. Old passwords seed today’s account takeovers. Check your addresses on Have I Been Pwned and retire every reused password, then freeze your credit at all three bureaus.

Known systems / HAVEIBEENPWNED

The internet forgets nothing it was paid to remember.

Your job.

Professional profiles and staff pages map your employer and network, and conference bios add the schedule. They are the first stop for anyone building a picture of your days. Staff pages, LinkedIn, conference bios, and press releases map your role, schedule, colleagues, and travel. Social engineers build pretexts from exactly this layer. Executives get impersonated to their own staff using public org charts. Publish what serves you, and keep calendar detail out of the bio.

Known systems / LINKEDIN

Your calendar is public infrastructure for anyone planning around you.

How you walk.

Video analytics increasingly identify people by build and walk, working at distances where faces fail. Camera networks make it a passive capability. Gait and body-shape analytics identify people at distances and angles where faces fail, from ordinary footage. Commercial products exist and deployments are expanding. The widest reported use is abroad, and the research is mature everywhere. It defeats masks and hats, which is precisely its selling point.

Some identifiers you carry cannot be turned off, only understood.

What you buy.

Card networks and loyalty programs assemble a running record of what you buy and where, delivery apps included, and segments of it sell downstream. Card networks and processors each keep a purchase ledger keyed to you, loyalty programs too, and brokers buy segments. Merchant category codes alone sketch a life. Purchase histories surface in divorces and investigations, in ad targeting too. Cash still buys the same groceries with no ledger attached.

Known systems / VISA · MASTERCARD · LIVERAMP

A receipt is a confession of habit and means, filed under your name at a known location.