The first question every owner asks is whether selling data exposes their customers. The answer depends on de-identification: the process of removing or transforming anything that could identify a person or company before data leaves processing.
What gets removed
- Names of people and companies
- Email addresses, phone numbers, and street addresses
- Account, invoice, and order numbers that could be traced back
- Tax IDs, government IDs, and payment details
- Signatures and identifying details inside free-text notes
What gets transformed
Removing names outright can break a workflow, because you can no longer tell which messages belong to which account. So names are replaced with consistent pseudonyms: "Ridgeway Dental" becomes "Company 4127" everywhere it appears. Dates can be shifted by a consistent offset, and dollar amounts can be grouped into ranges when an owner requests it.
How it's checked
Automated tools scan for patterns like emails and phone numbers, then people review samples to catch what tools miss, such as a customer's name mentioned casually in a note. Any key linking pseudonyms back to real names is kept separate and destroyed with the raw data.
What it doesn't do
De-identification lowers risk a great deal, but it is not magic. Unusual details can sometimes point back to a specific business. That's why it's paired with contract terms: buyers agree in writing not to attempt re-identification, not to redistribute raw data, and to delete records if they ever discover they can identify someone.
What should never be shared
Some data is too sensitive to license at all. Paid4Data does not accept patient health records, payment card numbers, government ID numbers, or data about children.
Read more on our security page, or see how the full process works.