You don't have to use dark web here either, the data brokers are regular companies with physical addresses and everything. It's just not common because people don't know about it, but there are no practical or legal barriers.

And I know about this from outside of the verge, I just believe in providing citations.