First of all, need to understand that personally identifiable information (PII) data leaking is a serious issue and you should consider changing your data sending/receiving method in your website from GET
to POST
. This must be your primary goal if the parameters are related to PII.
In Google Analytics you must remove these parameter in every single view:
Analytics customers are prohibited from sending personal information
to Google. The Analytics terms of service, which all Analytics
customers must adhere to, prohibits sending personally identifiable
information (PII) to Analytics (such as names, social security
numbers, email addresses, or any similar data), or data that
permanently identifies a particular device (such as a mobile phone’s
unique device identifier if such an identifier cannot be reset). Learn
more about how to avoid sending PII. Your Analytics account could be
terminated and your data destroyed if you use any of this information.
In your case, phone; busname; addr; city; state; postal are all PII by Google interpretation.
Other issues if you are leaking PII in your URL parameters:
You could be against Terms & Conditions with other services as well, not only Google Analytics. If you are using AdSense, Facebook Remarketing and any other services, you could send these URL to these servers which could cause problems and your accounts could be terminated.
If changing GET
to POST
not possible:
You should encrypt all of your PII data.
You can send Google Analytics an encrypted identifier or custom
dimension that is based on PII, as long as you use the proper
encryption level. Google has a minimum hashing requirement of SHA256
and strongly recommends the use of a salt, with a minimum of 8
characters. Notwithstanding any of the foregoing, you may not send
Google Analytics encrypted Protected Health Information (as defined
under HIPAA), even if it is hashed or salted.
How you can remove these data from Google Analytics:
1. In Google Analytics view settings
This is the easiest and simplest way to do it. Just go to your view settings under Admin > View Settings and add you parameters which you want to exclude in Exclude URL Query Parameters field. You must do it for every single view.

2. In Google Taga Manager
For this method make sure that you have enabled Page URL
variable.
Next, create a new custom variable and choose Custom JavaScript
with this script where under var params
you include your parameters which you want to exclude. Name the variable Remove Parameters from URL
or as you wish.
function() {
var params = ['orgid', 'phone', 'busname', 'addr', 'city', 'state', 'postal', 'categories'];
var _page = {{Page URL}};
var a = document.createElement('a');
a.href = _page;
if (a.search) {
var qps = a.search.replace('?', '&');
var i;
for (i = 0; i < params.length; i++) {
var _param = params[i];
var regex = new RegExp('&' + _param + '=[^&]*(&|$)', 'gi');
qps = qps.replace(regex, '&')
}
qps[0] === '&' ? qps = qps.slice(1) : '';
a.search = qps;
}
return a.href;
}
Next, go to your Google Analytics settings variable or to every single Universal Analytics tags and update settings to follow:

For Facebook Pixel and other 3rd party remarketing or other tags
Please, exclude firing the tags in GTM on URLs which contains these parameters to avoid any Terms & Condition problems.