Telehealth has made getting a prescription as easy as tapping a screen, but that convenience may come with a hidden cost. According to a recent report highlighted by MedPage Today, several telehealth companies continue to expose customers' medical data to third parties, including advertisers and data brokers. The findings suggest that despite growing scrutiny, many platforms still share sensitive information such as diagnoses, medication lists, and even mental health histories without explicit patient consent.
The report notes that while some companies have updated their privacy policies, the actual data-sharing practices often lag behind. For example, pixels and tracking tools embedded in telehealth websites can transmit user activity to Facebook, Google, and other firms. This happens even when patients believe their information is protected by federal health privacy laws, which often do not apply to direct-to-consumer telehealth platforms.
Experts quoted in the piece argue that the onus is on companies to adopt a "data minimization" approach—collecting only what is strictly necessary for treatment and deleting it promptly. They also call for clearer, more accessible privacy disclosures and stronger enforcement from regulators like the FTC. However, the article notes a key difference of opinion: some believe voluntary industry self-regulation is sufficient, while others insist that new federal legislation is needed to close the loopholes.
Until then, patients are left in a difficult position. The convenience of telehealth is undeniable, but the risk of exposing intimate health details to unknown third parties remains a serious concern. The report urges consumers to read privacy policies carefully and to ask providers directly about their data practices before using their services.