Updated October 2026
Will my customers find out if I license our data?
Buyers say your customers should not be identifiable in what they receive, because names are swapped for placeholders and contact details are scrubbed before anything moves on. Whether a customer ever learns you licensed records is a separate matter, and depends on your own agreements and disclosures.1,2,3
You are not alone
It is the first thing every owner asks
One broker built its whole ad around this worry. Your Data Value opens with "The first question most owners ask is whether their customers' private information would go out", and follows with "Customer details removed first". Nyne's engineering ad goes further: "Your CAD files, paid for. Clients protected."4,5
Even the largest proposed sale carved customers out. When Spirit Airlines' internal archive was put up for sale, passenger records were excluded and a consumer privacy ombudsman was appointed. What was offered was the airline's internal email and Teams traffic. The court has not yet ruled on that sale.6,7,8,9
What buyers do
How customer details are taken out
Three methods show up in buyers' terms. Swapping names for placeholders or codes, so "Henderson Roofing" becomes "Client 0417" everywhere it appears, often with a before-and-after sample you can check. Removing or transforming names and contact details in a secure workspace, or through an outside specialist, before anything moves on. And leaving whole categories out, such as data you hold for clients.1,10,11,2,12
micro1's terms read two ways. An earlier description says personal data is removed when relevant; micro1's own partnership page now says sensitive information is scrubbed before any downstream use. It also says the company reviews samples before release, which is your chance to check.13,14
The honest limit
Why cleaning is never perfect
Removing names is not the same as making a record anonymous. Researchers showed that 99.98% of Americans could be re-identified in a dataset from 15 demographic attributes. In a small town, an email about "the dental office on Main with the flooded basement in March" may point to one customer even with the name gone.15
So do three things. Exclude your most sensitive customers' folders outright, since buyers say any system, folder or record type can be left out. Review the cleaned samples yourself before release. And get a ban on re-identifying people written into the license. The quiz introduces you to the buyers we work with, so you can put all three to them on the first call.3,1,14
Telling them
Whether to tell your customers is your call, with advice
Some owners will want to tell key clients before anyone else does. Press coverage has been sharp on the employee side, with headlines like "Your Former Employer Is Selling Your Slacks and Emails to Train AI", and customer-side stories could follow. Whether you must tell customers anything is something to talk through with the buyer before you sign, and you are welcome to bring your own advisor; it is on the list below.16
FAQ
Questions, answered with sources
Sometimes. Research found 99.98% of Americans could be re-identified from 15 demographic attributes. Small, local businesses have more identifying details in their records.15
Every business is different, so this one is best talked through with the buyer you're working with. Their team goes over it with you before anything is signed.
Every business is different, so this one is best talked through with the buyer you're working with. Their team goes over it with you before anything is signed.
Before you sign
Questions to talk through with your buyer
Every business is different, so these are best talked through with the buyer you're working with. Their team goes over them with you before anything is signed.
Questions for this kind of business
- Does our privacy policy or any customer agreement restrict licensing records that mention customers?
- Will the license ban re-identification of our customers, and what happens if it occurs?
- How do CCPA, GDPR, UK GDPR and state privacy laws apply, and is de-identified data still personal information?
- Do customer, vendor or platform contracts, NDAs or API terms restrict this?
Questions for any buyer
- Is the license exclusive, and for how long?
- Can you sublicense the data, and to whom?
- Which AI labs will receive it, and will you tell us?
- How long do you keep it, and how is it deleted?
- What is your liability cap, and who indemnifies whom?
- Will the contract ban re-identification of people in the data?
- Who removes personal data, by what method, and do we approve it first?