MyRecon OSINTHow to Remove Your Personal Information From Search Results
A search engine is an index, not a library. Persuading one to drop a result removes the route almost everyone would use to find a page, and leaves the page itself untouched. Understanding that distinction is what makes the difference between a removal effort that works and one that produces months of frustration.
The order that works
Three layers, and doing them in the wrong order wastes most of the effort.
- Remove it at the source. Get the page changed or taken down by whoever publishes it. This is the only step that deletes anything, and every other step is a workaround for when it fails.
- Ask the search engines to update or remove the result. Once the source page is gone or altered, there are tools to make the index catch up quickly rather than waiting for a recrawl.
- Where the source will not cooperate, request delisting on its own terms: under privacy law, or under the engine's own policies for personal information.
Step one: the source
Identify who actually publishes the page and use the route they offer.
- A site you control, or an account you still have: delete the content, or set the page to noindex. If you delete an account, check what remains, many platforms keep posts and comments after the profile is gone.
- A forum, community or blog: contact the moderator or administrator. A polite, specific request naming the exact URL and what needs removing succeeds surprisingly often, particularly where the content is a stale personal detail rather than a matter of record.
- A people-search site or data broker: use their official opt-out page, which is a defined process even when it is deliberately awkward. This is a whole category of its own, the data broker guide covers how to work through it and why the entries come back.
- A company or organisation: where you have a legal right, the EU and UK give a right to erasure, and other jurisdictions increasingly offer comparable rights, send a written request to their data protection contact rather than a web form. A statutory request carries a deadline and an escalation route to a regulator; a support ticket does not.
- A site that will not engage at all: move to step three, and consider whether the content is unlawful rather than merely unwanted, because that changes which route applies.
Step two: making the index catch up
Once the page is gone or edited, the result can linger for weeks. The major engines provide tools to force the update.
- Outdated content tools exist at both Google and Bing for exactly this. They work only when the live page no longer matches what is indexed, they confirm a change that has already happened, and they are refused if the page still contains the content.
- If you control the site, the property owner's console gives faster and broader removal options than the public tool.
- Request each engine separately. They do not share decisions.
Step three: delisting without the source's help
Two separate routes, often confused.
The engine's own policies
Search engines will remove certain categories of result regardless of whether the page comes down, because the policies exist independently of any law:
- Personal contact information: home address, phone number, personal email, where its publication creates a risk of harm. Google operates a dedicated flow for this, and it is the most widely applicable removal route most people have.
- Government identifiers, bank and card numbers, medical records and similar.
- Doxxing content: contact details published with explicit or implicit malicious intent.
- Non-consensual explicit imagery, including synthetic and manipulated images. These requests are prioritised.
The right to be delisted
In the EU and UK, data protection law lets an individual ask a search engine to stop returning results for searches on their name, where the information is inadequate, irrelevant or excessive relative to the public interest. Several other jurisdictions have adopted comparable mechanisms.
Four things about it that are routinely misunderstood: it is assessed case by case and frequently refused for people with a public role; it applies to searches on your name rather than removing the page from every query; it is regional in effect; and it does not touch the underlying page at all.
If intimate images of you are online, there is a faster route than any of this. Hash-matching services operated for this purpose let you generate a digital fingerprint of an image on your own device: the image itself is never uploaded, and share only that fingerprint with participating platforms so matching content is blocked before it spreads. Where the person in the images is a minor, national child protection organisations provide a dedicated removal process and should be contacted first. Both routes work faster than search delisting, and neither requires you to hand your images to anyone.
What no form will remove
Setting expectations here prevents a lot of wasted effort:
- Lawfully published journalism about matters of public interest. Delisting requests against news coverage are usually refused, and refusal is the normal outcome rather than a mistake.
- Court records and official registers that a law requires to be public.
- Company filings naming directors, which are public by design in most countries.
- Content that is simply unflattering, where nothing about it is unlawful, private or inaccurate.
- Everything already copied. Archives, aggregators, screenshots and scrapers hold their own copies, and archive services have their own separate removal processes with their own criteria.
When removal fails: suppression
Where a result cannot be removed, it can often be pushed down. Results are ranked, and a first page occupied by things you control changes what a casual searcher sees.
That means a professional profile you maintain, a personal site on your own name, contributions under your name to places with authority, and consistent naming across them. It is slow, it works, and it is the standard answer for content that is lawful, accurate and unwanted.
Keep checking
None of this is a one-off. Brokers re-acquire and re-publish, pages move, and new results appear. Set a reminder every few months to re-run the searches from the search operators guide: your name in quotes, with and without your city, your addresses, your phone numbers and your handles, and create alerts for your name and contact details so that new results arrive by email rather than by surprise.
Check what your email address and handles are already exposed in, alongside the search results, with the MyRecon tools.
Questions people ask
Does removing a result from Google delete the page?
No. A search engine is an index. Delisting removes the route most people would use to find a page, and the page itself stays online, reachable by anyone with the address and still indexed by other engines. Removal at the source is the only action that deletes anything.
How long does a removal request take?
Days to several weeks, depending on the type of request and whether a human review is needed. Requests involving contact details or explicit imagery are generally handled fastest; delisting requests that require balancing against public interest take longest.
Will removed results come back?
They can. If the underlying page still exists and changes address, or if a data broker re-publishes the same information at a new URL, a new result appears and needs a new request. Treat this as maintenance every few months rather than a task that finishes.
What about content on other search engines?
Each engine is separate and needs its own request. Bing operates its own removal and delisting forms, and several smaller engines draw on Bing's index, so a successful request there often clears more than one destination.