Local Business SearchClearer Growth. Smarter Operations.
Dark navy header with the Local Business Search logo top-left, the kicker "Protect your business data" and the headline "Before You Hand Over Your Data." On the right, a blank frosted-glass card with a soft amber glow on one edge, where electric-blue data strands branch off toward many faint glowing nodes.

Blog

Before You Give Your Details to a Lead or Listing Site: What to Check

Lead and listing sites often share what you submit with partners. How to read the privacy policy, what FCC call and text rules say, and how to build your own leads.

You fill out one form for a business loan quote or sign up for a directory listing, and by the afternoon your phone won't stop ringing. Owners have been talking about this lately, and it usually isn't a mystery: many lead and listing sites say in their own privacy policies that they share what you submit with partners. That isn't always a bad thing, since sometimes you want several offers. But you should know what you're agreeing to before you click submit. Here's what to check, what the rules on calls and texts actually say, and how to build leads you control.

Read what the site says it does with your details

The privacy policy is where a company tells you, in its own words, who gets your information. Take LendingTree as an example of how a comparison marketplace works. Its privacy policy (last updated July 8, 2026) says that when you submit a request for a loan, insurance or another financial product, "we may disclose your personal information to lenders and other third parties in our network (collectively, 'Network Partners')... as necessary to deliver the products and services that you requested."

It also says it may disclose your information to Network Partners "to provide you with information about financial products and services that may interest you," and that those partners "may use and/or retain your personal information whether or not you use their services," under their own privacy policies. It links to its partner lists and encourages readers to review them periodically.

That's a clear description of the model, and LendingTree says so up front. The point isn't that it's doing anything wrong. The point is that one form can reach many companies, and each one then follows its own rules.

Five things to look for in any lead or listing site's policy:

Who receives your details. Look for words like "partners," "network," "affiliates," "marketing partners" or "sell or share."

Whether there's a partner list. If there is one, skim it.

What happens after the first company. Can partners keep your details even if you don't hire them?

How to opt out. Find the unsubscribe options, the "Your Privacy Choices" or "Do Not Sell or Share" link, and the contact for privacy requests.

What you're consenting to on the form itself. The fine print next to the submit button often matters more than the policy, because that's where call and text consent is usually given.

What the call and text rules say

The Do Not Call Registry is for personal numbers. An FTC consumer Q&A on the registry, archived on GovInfo, says it "is only for personal phone numbers" and that "business-to-business calls and faxes are not covered." The same Q&A notes that making an inquiry or submitting an application to a company creates a business relationship that lets it call you for three months, unless you ask it to stop. So filling out a form can open the door to calls even if your number is registered.

You can revoke consent to robocalls and robotexts in any reasonable way. The FCC's 2024 order, Strengthening the Ability of Consumers to Stop Robocalls, says consent "can be made in any reasonable manner." Replying "stop," "quit," "end," "revoke," "opt out," "cancel" or "unsubscribe" to a text counts. Callers must honor do-not-call and revocation requests "within a reasonable time not to exceed ten business days." The FCC set April 11, 2025 as the effective date.

One piece was delayed. An April 2025 FCC order postponed only the requirement that an opt-out from one type of message must stop all of a caller's unrelated robocalls and robotexts. The rest of the rule took effect on schedule.

The "one-to-one consent" rule never took effect. In 2023 the FCC adopted a rule that would have required separate consent for each seller instead of one checkbox covering many. In January 2025 the Eleventh Circuit vacated that rule in Insurance Marketing Coalition v. FCC, and the FCC later restored the earlier wording. In plain terms, one form can still collect consent for calls from several companies. Read the checkbox.

State privacy rights may help. If you live in California, the Attorney General's CCPA page explains that you can tell covered businesses to stop selling or sharing your personal information. Covered businesses must honor a Global Privacy Control signal from your browser, and they have up to 15 business days to act on an opt-out. The CCPA protects people, not companies, so it applies to you as an individual, such as your own name and cell number. Several other states have similar laws, but the details differ, so check your state attorney general's site.

What isn't clear: none of these sources tells you exactly how many companies will contact you after a given form, or how long partners keep your details. That depends on the site, the product and your answers. If the policy doesn't say, assume more rather than fewer.

Listing sites: know what you're paying for

Directory and review sites work differently from loan marketplaces, but the same rule applies: read their own help pages. Yelp says its recommendation software "is completely automated, no Yelp employee can manually override" it, and that it "treats reviews of advertisers and non-advertisers exactly the same" (Yelp: why a review isn't recommended). In other words, advertising there buys visibility, not better reviews. We covered the details in our post on Yelp reviews that aren't recommended and ad charges.

If the calls have already started

Reply "STOP" to texts and keep a screenshot.

On calls, clearly say "Please stop calling this number" and write down the company, the date and the time.

Use the site's own opt-out links and its privacy request contact.

If you're in California, use the "Do Not Sell or Share" link or turn on Global Privacy Control in your browser.

Watch for scams that ride the wave. Fake "verification" calls are common, as our post on Google Business Profile verification scam calls explains.

Build leads you own

Rented leads have a place, but leads that come straight to you are cheaper over time and come with no strings attached.

Make your website the destination. Give each service its own page that answers local questions, with one clear form and a tap-to-call number. See local service pages should answer local problems.

Tune up your Google Business Profile. Accurate hours, categories, a service area and steady reviews put you in front of people who are already searching. If verification is stuck, start with our GBP verification guide.

Follow up fast. Most lead loss happens after the form is submitted. Set up an instant auto-reply and a missed-call text-back, and read why local businesses lose leads when nobody follows up.

Route leads to one place. Send forms, calls and messages to a single inbox or CRM so nothing gets lost. Our post on routing website forms covers how.

Be the business you'd want to hear from. If you text customers, get clear consent and honor "stop" right away. The same FCC rules apply to you.

How Local Business Search can help

Local Business Search builds websites, local SEO and lead-generation systems that bring inquiries straight to you, including service pages, Google Business Profile setup, fast follow-up and clean lead routing. We can also review the fine print on a lead or listing service before you sign up. We also help with AI setup and consulting and small-business IT. Done-for-you how-to videos are coming soon.