There are a small handful of us out there, targeting slightly different but overlapping use cases, but this is me https://www.privacydynamics.io. Happy to answer any questions about it.

This is the same problem as white-hat security: you need people who know an awful lot about how bad guys work but are good guys. Security has developed a legitimate market over the years, but that took time.

You could try to ask independent consultant(s) who you trust to work on that problem and let them grow that practice. The problem is that they would need to have access to marketing platforms.

I just realized you wrote “de-anonymization”. We don’t do that, but we do a risk analysis that simulates an attack, making some pessimistic assumptions about what data an attacker may have for linkage, to estimate how risky data is to share, essentially as a benchmark. TLDR; more unique combinations of quasi-identifiers make data more susceptible to a linkage attack. We also pitch our system as a risk analysis only tool, though no one is using it for that currently. If you’re interested in methods, I’d recommend El Emam’s book, “Guide to the De-Identification of Personal Health Information”, which covers a lot in detail. Our attack simulation is based on his work.