Cell phone numbers are not public information. No government agency publishes them, wireless carriers do not print them in directories or feed them to 411 services, and federal law forbids your carrier from sharing your number outside the service relationship without your approval.1Office of the Law Revision Counsel. 47 U.S. Code 222 – Privacy of Customer Information The catch is that “not public” is not the same as “private.” Your number can still spread widely through the companies, apps, and platforms you hand it to, and once it leaks, pulling it back is nearly impossible.
The Legal Baseline: Carriers Must Keep Your Number Confidential
During the landline era, phone companies routinely printed subscriber numbers in white-page directories and made them available through 411. Wireless carriers never adopted that practice. There is no centralized, publicly accessible database of cell phone numbers, and carriers do not list your number in directory assistance unless you specifically ask.
The rule behind that practice sits in Section 222 of the Communications Act. Every telecommunications carrier has a duty to protect the confidentiality of customer proprietary network information, which includes your phone number, call records, calling patterns, and billing information.1Office of the Law Revision Counsel. 47 U.S. Code 222 – Privacy of Customer Information Your carrier cannot use or share that data outside your existing service relationship unless you give approval or a specific legal exception applies.
So the starting point is clear. Your number is not a public record. It is not published. It is not sold by your carrier. If it reaches a stranger, it got there through some other route.
How Your Number Ends Up in Circulation
Cell numbers leak through a surprisingly wide range of everyday channels. Understanding those channels is what lets you decide where to be more careful.
Apps, Loyalty Programs, and Online Accounts
Every time you type your number into a retailer’s checkout page, a delivery app, or a loyalty signup, you create another copy of it in someone else’s database. Many companies share or sell customer data to advertising partners and data brokers, and privacy policies often disclose that sharing in plain language if you take a minute to read them. A number you handed to a pizza app on Monday can land in a marketing database by the end of the week.
Data Breaches
When a company that already has your number gets hacked, that number can end up on dark-web marketplaces alongside your name, email, and sometimes more sensitive information. Breaches hit retailers, healthcare systems, and financial platforms constantly. You cannot prevent a breach at a company you have already trusted with your data, which is a good argument for handing your number to as few companies as possible in the first place.
Social Media and Data Scraping
Platforms that ask for your phone number at signup often make it searchable by default or store it in ways vulnerable to automated scraping. Researchers exploited one messaging platform’s contact-discovery feature by feeding random number sequences into the system at roughly 100 million per hour, harvesting billions of numbers along with profile photos and biographical details for most affected users. The platform had not effectively limited how fast or how many lookups a single source could perform. Rate-limiting is the main defense, but not every platform implements it aggressively.
Reverse Lookup Sites and Data Brokers
People-search websites compile phone numbers from public records, commercial data purchases, social media scrapes, and user submissions, then link those numbers to names, addresses, and other personal details. These services are legal. The underlying data is often already semi-public; the aggregation is what makes it invasive. Getting your information off these sites usually means submitting opt-out requests to each one individually, and the listings can reappear when new data feeds refresh.
Public Records and Caller ID
Your number can land in a public record if you used it on a business registration, court filing, or professional license application. And every outgoing call transmits your number to the recipient through Caller ID unless you take steps to block it.
The National Do Not Call Registry
The simplest tool against unwanted sales calls is the National Do Not Call Registry. Registration is free, takes about a minute, and never expires. Sign up at DoNotCall.gov or call 1-888-382-1222 from the phone you want to register.2Consumer Advice. National Do Not Call Registry FAQs If you register online, you have 72 hours to click a confirmation link in an email.
Once your number is on the registry, telemarketers cannot call it. Anyone making telephone solicitations must check its call lists against the registry at least every 31 days and scrub matching numbers.3eCFR. 47 CFR 64.1200 – Delivery Restrictions
The registry does not block every category of call. Political calls, charitable solicitations by nonprofits calling on their own behalf, debt collection, and pure informational calls or surveys are all still permitted. Companies you have recently done business with also get a limited window: 18 months after your last purchase or transaction, and three months after an inquiry you initiated.4Federal Trade Commission. Q&A for Telemarketers and Sellers About DNC Provisions in TSR If you tell any of those callers to stop, they must honor the request immediately.
The Telephone Consumer Protection Act
The TCPA is the main federal law governing unwanted calls and texts to cell phones. It makes it illegal to call or text a cell phone using an automatic dialing system or a prerecorded voice without your prior express consent.5Federal Communications Commission. Telephone Consumer Protection Act 47 U.S.C. 227 – Federal Robocalls, autodialed marketing calls, and prerecorded telemarketing messages all fall under it. The exceptions are emergency calls and calls you specifically agreed to receive.
The FCC treats text messages the same as calls, so unsolicited marketing texts sent through automated systems are illegal without your consent, whether they come from a short code, a long code, or a standard number.
Revoking Consent You Already Gave
If you previously gave a company permission to contact you and want it to stop, you can revoke that consent at any time by any reasonable method. Replying “STOP” to a marketing text works. So does telling a representative over the phone, sending an email, or mailing a letter. Once you revoke, the company has 10 business days to stop contacting you.6Federal Communications Commission. FCC DA-25-312A1 – Consent Revocation Order A broader FCC rule taking effect April 11, 2026 clarifies that revoking consent for one type of message covers all future robocalls and robotexts from that caller, even on unrelated matters.
Suing Under the TCPA
The TCPA gives you a private right of action. You can sue in state court without waiting for any agency to act. For violations involving automated calls or texts to your cell phone, you can recover $500 per violation, and violation means per call or per text, not per campaign.7Office of the Law Revision Counsel. 47 U.S. Code 227 – Restrictions on Use of Telephone Equipment If the court finds the violation was willful or knowing, it can triple that amount to $1,500 per violation.
For Do Not Call Registry violations, you need to have received more than one call from the same entity within a 12-month period before you can sue. The same $500-per-violation and treble-damages provisions apply.7Office of the Law Revision Counsel. 47 U.S. Code 227 – Restrictions on Use of Telephone Equipment A telemarketer has a defense if it can show it had reasonable written procedures to prevent violations and followed them with due care, but that defense is hard to make when your number was on the registry and they called anyway.
Many people file these claims in small claims court, where filing fees are modest and the process is straightforward. Keep a log of every unwanted call and text with date, time, calling number, and the substance of the message. Screenshots of texts are especially useful. That documentation is what turns an annoyance into an enforceable claim.
Filing a Federal Complaint
If you would rather have an agency take a look, you can file a complaint with the FCC at no charge and without a lawyer. The easiest route is fcc.gov/complaints. You can also call 1-888-225-5322 or mail a written complaint to the FCC’s Consumer Inquiries and Complaints Division.8Federal Communications Commission. Filing an Informal Complaint Include the number that called you, the date and time, and what the caller said or the text contained. If the FCC serves your complaint on a provider, that provider must respond in writing to you and the FCC within 30 days.
Practical Steps to Keep Your Number Contained
Turn On Built-In Call Screening
Both major mobile operating systems filter suspicious calls before your phone rings. On iPhone, the Screen Unknown Callers setting lets you silence unknown numbers to voicemail, ask callers to state their reason before your phone rings, or let everything through.9Apple Support. Manage Unknown Callers on iPhone On Android, the Google Phone app has caller ID and spam protection turned on by default, and a Filter spam calls setting can send suspected spam straight to voicemail without notifying you.10Google. Use Caller ID and Spam Protection – Phone App Help Neither system is perfect. Both cut the volume substantially.
Use a Secondary Number for Anything Sketchy
A secondary number through a VoIP service, prepaid SIM, or dedicated app lets you hand out a number for online signups, classified ads, and businesses you do not fully trust while keeping your primary number out of those databases. If the secondary number starts drawing spam, you can drop it without disrupting your real contacts. This is one of the most effective privacy measures available, and it costs little or nothing.
Tighten Social Media Settings
On every platform where you have an account, look for the setting that controls whether your phone number is searchable or visible to other users, and turn it off. Some platforms default to letting anyone who has your number in their contacts find your profile, a feature meant for finding friends that also enables mass scraping.
Opt Out of Data Broker Sites
Removing your information from people-search and data-broker sites is tedious but worthwhile. Most sites have an opt-out page, though the process varies and some require you to find your listing first and then submit a removal request with identity verification. You may need to repeat the process across dozens of sites. Some states have started building centralized deletion tools that let residents submit a single request covering hundreds of registered brokers, though eligibility depends on residency. Paid privacy services can also automate opt-out submissions if you would rather not manage it yourself.
Set a Carrier PIN
Set a PIN or passcode with your wireless carrier that must be provided before any account changes. Most major carriers offer this free. If your phone suddenly shows “No Service” or “SOS Only” where you normally have coverage, call your carrier from another phone right away. Sudden loss of signal is the hallmark of a SIM swap in progress, and acting within minutes can be the difference between a close call and a drained bank account.