Malwarebytes Labs Finds Amazon Builds Detailed Personal Profiles Without User Opt-Out
Research reveals Amazon collects intimate data on bodies and families, with no clear path for users to delete these profiles.
Key points
- Amazon maintains detailed personal profiles including physical and family data.
- Malwarebytes Labs found no functional opt-out mechanism for this data collection.
- Users did not explicitly consent to the creation of these specific profiles.
Malwarebytes Labs published findings on October 20, 2026, revealing that Amazon maintains detailed personal profiles on users. The research indicates these profiles contain intimate information about customers' bodies, families, and daily lives. This data collection occurs without explicit user consent or a clear method to opt out.
The security firm’s analysis shows Amazon aggregates information to create a comprehensive view of the individual. This includes physical attributes and family structures that users did not voluntarily submit for this purpose. The lack of transparency regarding this profiling raises significant privacy concerns for consumers relying on the platform.
Context and Background
According to Malwarebytes Labs, the extent of this data aggregation goes beyond standard purchase history. The company builds a narrative of the user’s life based on inferred and collected data points. This practice suggests a deep level of surveillance that exceeds typical e-commerce tracking requirements.
The research team attempted to locate settings or controls that would allow users to delete or stop this profiling. They were unable to find any functional opt-out mechanism within the Amazon interface. This absence of control means users remain subject to this data collection regardless of their privacy preferences.
Who Is Affected
This issue affects any individual who has an account with Amazon and engages with its services. The profiles are generated automatically, meaning even casual users may have detailed records created about them. The scope includes data on physical characteristics and family relationships, which are highly sensitive categories of personal information.
Users cannot currently verify the full extent of the data held against them. The inability to audit or remove these profiles leaves consumers vulnerable to potential misuse or unauthorized sharing. This lack of agency over personal data is a core finding of the Malwarebytes investigation.
What should you do?
Security professionals and privacy advocates are monitoring this development closely. The findings highlight a gap between user expectations of privacy and corporate data practices. Until Amazon provides a clear path to opt out, users must assume their data is being stored and analyzed.
What to do and how to stay safe: Amazon
- Review your Amazon account privacy settings to identify any available data controls.
- Limit the amount of personal information shared in profiles and delivery instructions.
- Monitor official statements from Amazon regarding data privacy and opt-out policies.
- Use separate email addresses for online shopping to reduce data linkage risks.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Can I opt out of Amazon's personal profiling?
According to Malwarebytes Labs, there is currently no known way to opt out of this specific profiling.
What kind of data is Amazon collecting?
Amazon collects data on your body, family, and life, creating a detailed personal profile.
Did I sign up for this data collection?
No, the research indicates users did not sign up for this specific type of profiling.
