Skip to main content

Google can now remove search results that dox you without second-guessing intent

Google can now remove search results that dox you without second-guessing intent


If you put in a request and there isn’t public utility for the info

Share this story

It’ll remove links to your address, phone number, and more.
It’ll remove links to your address, phone number, and more.
Illustration by Alex Castro / The Verge

Google says it’s expanding the types of personal information that it’ll remove from search results to cover things like your physical address, phone number, and passwords. Before now, the feature mostly covered info that would let someone steal your identity or money — now, you can ask Google to stop showing certain URLs that point to info that could lead someone to your house or give them access to your accounts.

According to a blog post, Google’s giving people the new options because “the internet is always evolving” and if its search engine gives out your phone number or home address, that could be both jarring and dangerous. Here’s a list of what kinds of info Google may remove, with the new additions in bold (h/t to the Wayback Machine for making the old list accessible):

  • Confidential government identification (ID) numbers like U.S. Social Security Number, Argentine Single Tax Identification Number, etc.
  • Bank account numbers
  • Credit card numbers
  • Images of handwritten signatures
  • Images of ID docs
  • Highly personal, restricted, and official records, like medical records (used to read “Confidential personal medical records”)
  • Personal contact info (physical addresses, phone numbers, and email addresses)
  • Confidential login credentials

According to a support page, Google will also remove things like “non-consensual explicit or intimate personal images,” pornographic deepfakes or Photoshops featuring your likeness, or links to sites with “exploitative removal practices.”

Google already had policies in place that let people remove personal information that had been shared maliciously, an act commonly known as doxxing. This policy change, however, requires less of a judgment call — instead of a Google employee having to look at the links submitted and somehow determine whether they’d cause harm, now Google will just have to decide whether the info is of public interest. According to its FAQ, that person will determine whether the info in the link is “newsworthy,” “professionally-relevant,” or if came from a government; all things that could be far easier to decide than trying to figure out why a phone number was posted.

The company does still have a process for dealing with actual malicious doxxing too, if, say, your phone number was shared “with malicious, threatening, or harassing intent.” When you’re filling out the personal information removal request, there’s a question on whether you think that’s the case. The form also asks you to give Google a list of URLs that link to the personal information, as well as the search pages that surface those links. After you submit a request, Google will evaluate the links and determine whether they’re relevant to the public. If Google does decide that the links should be removed, it says they’ll either not show up for any search query or that they won’t be surfaced for searches that include your name.

Google seems to be applying a relatively high bar for what counts as personally identifying information, which makes it a bit different from the systems it’s had to implement in places like the EU to comply with so-called right to be forgotten rules. Those laws let people request that links they deem unflattering or irrelevant be taken down, which isn’t the case here — the rules Google added today only cover links to very sensitive info.

If you’ve ever searched for someone’s phone number, you may have ended up at a site that exists explicitly to sell people’s information, promising to give it to you if you subscribe. When asked if the new policy would apply to these types of sites, Google spokesperson Ned Adriance told The Verge that it would: “If we can verify that such links contain personally identifiable information, there is not other content on the webpage that may be of public interest, and we receive a request to remove those URLs, we will do so, assuming they meet our requirements outlined in the help page — whether or not the information is behind a paywall,” he said in an email.

This page was easily accessible from a Google link and promises to give out my phone number and address. If it meets Google’s requirements, it counts.
This page was easily accessible from a Google link and promises to give out my phone number and address. If it meets Google’s requirements, it counts.

Importantly, as Google notes on its support page and in its blog post, getting the information taken off of Google Search doesn’t wipe it from the internet. If, for example, you ask Google to delist a forum post with your address in it, anyone who goes to that forum will be able to see it; the post just shouldn’t pop up if someone searches “[your name] home address.”

Update April 27th, 5:05PM ET: Added statement from Google on paywalled info sites.

Correction, April 28th 4:21PM ET: A previous version of this article didn’t properly address the difference between Google’s new policies for removing personally identifying information, and removing links meant to maliciously dox a person. The story has been updated to provide additional context, and we regret the error.

Today’s Storystream

Feed refreshed An hour ago Midjourneys

Alex CranzAn hour ago
After DART smashed into Dimorphos, I can’t stop thinking about the best “blow up an asteroid” story.

LucasArts and Steven Spielberg came up with The Dig, a game about an astronaut, scientist, and journalist blowing up an asteroid and finding a spaceship inside, and they did it years before Bruce Willis, or NASA. You can still buy and play it on Steam!

Richard LawlerTwo hours ago
Everything looks better in slow motion.

Apple’s Dynamic Island alert system isn’t sitting still around your iPhone 14’s front-facing camera array. We’ve been enjoying its contextual animations — and even an Android copycat — since it was unveiled, but take a look at it here, captured at 240fps, to see exactly how iOS applies animations that make it feel a bit more lively.

External Link
Russell BrandomTwo hours ago
Oracle will pay $23 million to settle foreign bribery charges.

The SEC alleges that Oracle used a slush fund to bribe officials in India, Turkey and the United Arab Emirates.

This behavior is sadly common among software companies doing business overseas, and it’s not unique to Oracle. In March, a former Microsoft executive claimed the company spent as much as $200 million a year in bribes for foreign officials.

Asian America learns how to hit back

The desperate, confused, righteous campaign to stop Asian hate

Esther WangSep 26
External Link
Emma Roth3:16 PM UTC
Celsius’ CEO is out.

Alex Mashinsky, the head of the bankrupt crypto lending firm Celsius, announced his resignation today, but not after patting himself on the back for working “tirelessly to help the company.”

In Mashinsky’s eyes, I guess that means designing “Unbankrupt yourself” t-shirts on Cafepress and then selling them to a user base that just had their funds vaporized.

At least customers of the embattled Voyager Digital crypto firm are in slightly better shape, as the Sam Bankman-Fried-owned FTX just bought out the company’s assets.

Mary Beth Griggs2:46 PM UTC
NASA’s SLS rocket is secure as Hurricane Ian barrels towards Florida.

The rocket — and the Orion spacecraft on top — are now back inside the massive Vehicle Assembly Building. Facing menacing forecasts, NASA decided to roll it away from the launchpad yesterday.

External Link
Andrew J. Hawkins1:30 PM UTC
Harley-Davidson’s electric motorcycle brand is about to go public via SPAC

LiveWire has completed its merger with a blank-check company and will make its debut on the New York Stock Exchange today. Harley-Davison CEO Jochen Zeitz called it “a proud and exciting milestone for LiveWire towards its ambition to become the most desirable electric motorcycle brand in the world.” Hopefully it also manages to avoid the cash crunch of other EV SPACs, like Canoo, Arrival, Faraday Future, and Lordstown.

The Verge
Andrew Webster1:06 PM UTC
“There’s an endless array of drama going on surrounding Twitch right now.”

That’s Ryan Morrison, CEO of Evolved Talent Agency, which represents some of the biggest streamers around. And he’s right — as you can read in this investigation from my colleague Ash Parrish, who looked into just what’s going on with Amazon’s livestreaming service.

The Verge
Richard Lawler12:59 PM UTC
Green light.

NASA’s spacecraft crashed, and everyone is very happy about it.

Otherwise, Mitchell Clark is kicking off the day with a deeper look at Dish Network’s definitely-real 5G wireless service , and Walmart’s metaverse vision in Roblox is not looking good at all.

External Link
Jess Weatherbed11:49 AM UTC
Won’t anyone think of the billionaires?

Forbes reports that rising inflation and falling stock prices have collectively cost members of the Forbes 400 US rich list $500 billion in 2022 with tech tycoons suffering the biggest losses.

Jeff Bezos (worth $151 billion) lost $50 billion, Google’s Larry Page and Sergey Brin (worth a collective $182b) lost almost $60b, Mark Zuckerberg (worth $57.7b) lost $76.8b, and Twitter co-founder Jack Dorsey (worth $4.5b) lost $10.4b. Former Microsoft CEO Steve Ballmer (worth $83b) lost $13.5b while his ex-boss Bill Gates (worth $106b) lost $28b, albeit $20b of that via charity donations.