Your ZIP Code Is Not Anonymous: What Five Digits Can Reveal

A five-digit ZIP code can feel like a neutral piece of location data, but the moment it is combined with a birth date and gender it becomes a surprisingly strong identifier. Researchers estimate that those three details alone can identify most of the U.S. population. Websites, loyalty programs and social media often request a ZIP code without explaining why, which means it can quietly become part of a profile that data brokers buy and sell.

How a ZIP code becomes an identifier

Privacy researchers call a data point that is not unique on its own but becomes identifying in combination a quasi-identifier. Birth date, gender and ZIP code are classic examples, because public records such as voter lists let someone match the combination to a real person. A guide from Censinet on re-identification risk in healthcare cites the estimate that 63% to 87% of the U.S. population can be identified using just those three details. The same matching logic does not disappear when names are removed.

A critique of HIPAA Safe Harbor using large language models found that even after all other information was removed, a model could predict a patient’s neighborhood based on diagnosis alone. That finding underscores how much information can remain hidden in data that looks anonymous.

What data brokers can infer from your ZIP

Data brokers are companies that gather, analyze, organize and sell information about people, often for marketing. According to StaySafeOnline, the details they hold can include your name and contact information, current and past addresses, demographic information, purchase history, online activity, and public records such as property ownership and voter registration. Because a ZIP code maps to a small geographic area, it helps brokers connect your activity to publicly available demographic statistics for that area, acting as a proxy for characteristics you never provided directly.

How much one five-digit code reveals

To see the geographic detail packed into a five-digit code, enter your ZIP into a free lookup tool. A ZIP Code Lookup returns the city, county and state tied to that number, and you can drill into ZIP+4 sub-locations or browse codes by county. That same granularity is what makes a ZIP useful for matching records across databases, even when no name is present.

California’s privacy rights and DROP tool

California law gives consumers the right to know what personal information a business collects, the right to delete it, and the right to opt out of the sale or sharing of that information, according to the California Attorney General. Because a ZIP code can sit inside that personal information, those rights matter. A newer California platform called DROP sends deletion and opt-out requests to every registered data broker at once; the form itself asks for your ZIP code so brokers can locate you in their records, which shows how central the number is to identity matching.

Practical ways to limit exposure

Treat your ZIP as personal information, not a throwaway field. When a website, loyalty program or social media form asks for it, consider whether the service needs your home ZIP for delivery or account verification, or whether it is simply for marketing. If it is not required, leave the field blank, use a work or nearby public ZIP where allowed, and avoid pairing a real ZIP with a full birth date and gender on public profiles. Use the rights that already exist: California residents can file a DROP request, and consumers can submit opt-outs directly to data brokers. No single data point is anonymous once it can be linked, and the same quasi-identifier logic that researchers use to re-identify patients applies to everyday profiles.