Why are these health-care websites sharing sensitive info with LinkedIn and Snapchat?
Why are these health-care websites sharing sensitive info with LinkedIn and Snapchat?
This story was originally published by The Markup, now a part of CalMatters. Sign up for their newsletter.State-run health care websites around the country, meant to provide a simple way to shop for insurance, have been quietly sending visitors' sensitive health information to Google and social media companies, The Markup and CalMatters found. The data, including prescription drug names and dosages, was sent by web trackers on state exchanges set up under the Affordable Care Act to help Americans purchase health coverage. The exchange websites ask users to answer a series of questions, including about their health histories, to find them the most relevant information on plans. But in some cases, when visitors responded to sensitive questions, the invisible trackers sent that information to platforms like Google, LinkedIn, and Snapchat. The Markup and CalMatters audited the websites of all 19 states that independently operate their own online health exchange. While most of the sites contained advertising trackers of some kind, The Markup and CalMatters found that four states exposed visitors' sensitive health information.Nevada's exchange, Nevada Health Link, asks visitors about what prescriptions they use, including the names and dosages of the drugs, to help them find their best options for health insurance. When visitors start typing, it suggests specific medications, including antidepressants, birth control and hormone therapies. As visitors answered the questions, their responses were sent to LinkedIn and Snapchat, according to tests conducted by The Markup and CalMatters in April and May.
Spend your money smart: Sign up for USA TODAY's Daily Money newsletter.
On the other side of the country, Maine's exchange, CoverME.gov, sent information on drug prescriptions and dosages to Google through an analytics tool. It also sent the names of doctors and hospitals that people had previously visited.
Rhode Island's exchange, HealthSource RI, sent prescription information, dosages, and doctors' names to Google.
Massachusetts Health Connector, another exchange, told LinkedIn whether visitors said they were pregnant, blind, or disabled.
After being contacted by The Markup and CalMatters, Nevada's health exchange stopped sending visitors' data to Snapchat and Massachusetts stopped sending data to LinkedIn. Additionally, The Markup and CalMatters found that Nevada stopped sending data to LinkedIn in early May, as testing was happening.
The Markup and CalMatters discovered the sharing after finding that California's exchange, Covered California, told LinkedIn when a visitor indicated they were blind, pregnant, or a victim of domestic violence.
Experts said state health exchanges' use of advertising trackers was troubling if not entirely surprising. Such tools can help organizations to reach visitors and tailor ads for them. Google Analytics allows website operators to better understand who is coming to their site and to optimize ad campaigns. The LinkedIn and Snap trackers, like a similar offering from Meta, help companies target their social media ads.
Nevada uses the trackers to help target marketing at uninsured residents, according to Russell Cook, Executive Director of the state agency that operates Nevada's exchange, Silver State Health Insurance Exchange.
But health care services need to be especially careful with those tools, said John Haskell, a data privacy attorney who has previously worked as an investigator for the Department of Health and Human Services.
'It doesn't surprise me that organizations that have these massive tech stacks that rely on third party-resources don't have a full understanding of what the configuration is, what the data flows are, and then once they go to somebody, what that data is being used for,' Haskell said. 'It's something that needs to be addressed.'
How was state exchange data tied to users' identities?
After The Markup and CalMatters reported on Covered California's sharing of health data with LinkedIn, the exchange removed its trackers and said it would review its data practices. The news triggered a class-action lawsuit and questions from federal lawmakers.
The Markup and CalMatters then examined websites operated by 18 states other than California, as well as Washington, D.C., to see what information they shared as users navigated them. The sites were established under the Affordable Care Act, which requires states to offer health insurance either through their own exchanges or one operated by the federal government.
To test them, The Markup and CalMatters first ran the sites through Blacklight, a tool we developed to reveal web trackers. We then reviewed network traffic on the sites to see what data the trackers received when visitors filled out forms.
The results showed that 18 used some sort of tracker. Some were filled with them. Nevada, for example, used nearly 50. By contrast, Blacklight found no tracker of any kind on Washington, D.C.'s exchange. Popular websites use on average seven trackers, according to Blacklight scans of the 100,000 most trafficked sites on the web.
Many of the sites used trackers in relatively innocuous ways, like counting page views.
The four exchanges The Markup and CalMatters found sharing sensitive health data sent varied responses to questions about the tracking.
Cook said in a statement that trackers placed by his Nevada agency were 'inadvertently obtaining information regarding the name and dosage of prescription drugs' and sending it to LinkedIn and Snapchat.
Cook acknowledged such data was 'wholly irrelevant to our marketing efforts' and said it had disabled tracking software pending an audit.
Jason Lefferts, a spokesperson for Massachusetts Health Connector, said in a statement that 'personally identifiable information is not part of the tool's structure and no personally identifiable information, not even the IP addresses of users of the tool, has ever been shared with any party in any way via this tool." But LinkedIn's tracker documentation makes clear that it correlates the information it receives with specific LinkedIn accounts so companies can use the data for features like retargeting website visitors. The company's documentation also states it later obscures this information and eventually deletes it.
Spokespeople for the Rhode Island and Maine health exchanges said that they pay a vendor, Consumers' Checkbook, to run a separate site that allows visitors to explore what plans are available to them through their states' exchanges. It was from these sites that sensitive information was shared to Google. Consumers' Checkbook's sites are at different web addresses than the exchange sites, but are prominently linked to on the exchange sites and display identical branding like the state health exchange's logo, making it unlikely that an average visitor would realize they were no longer on a state-run domain.
Christina Spaight O'Reilly, a spokesperson for HealthSource RI, said the company uses Google Analytics to study trends but not to serve ads, and 'disables Google Signals Data Collection, ensuring that no data is shared with Google Ads for audience creation or ad personalization, and no session data is linked to Google's advertising cookies or identifiers.' HealthSource RI's terms of use mention the use of Google Analytics, she noted. A spokesperson for CoverME.gov made similar points, saying that the agency 'does not collect or retain any data entered into the tool.'
Consumers' Checkbook declined to comment beyond the exchanges' statements.
All of the exchanges said that individually identifiable health information, like names and addresses, wasn't sent to third parties. But the point of the trackers is to enhance information sent about a user with data the platforms already have on that user, and every tracker found by The Markup and CalMatters logged details about individual visitors, such as their operating system, browser, device, and times of visit.
In response to requests for comment, the tech companies whose trackers were examined uniformly said they do not want organizations sending them potentially sensitive health data, and that doing so is against their terms of use.
Steve Ganem, Director of Product Management for Google Analytics, said that 'by default any data sent to Google Analytics does not identify individuals, and we have strict policies against collecting Private Health Information or advertising based on sensitive information.' A spokesperson for LinkedIn, Brionna Ruff, said that advertisers are not allowed 'to target ads based on sensitive data categories,' such as health issues. A spokesperson for Snapchat owner Snap said the same, noting that sending purchases of supplies like prescriptions would run afoul of the company's rules about sensitive data.
A Google Analytics information page specifically discusses how organizations that use the company's tools should comply with the Health Insurance Portability and Accountability Act, which protects health data. The page notes that 'Google makes no representations that Google Analytics satisfies HIPAA requirements.'
'It is important to ensure that your implementation of Google Analytics and the data collected about visitors to your properties satisfies all applicable legal requirements,' the page reads.
More incidents
State exchanges aren't the only health sites that have sent medical information to social media companies. In 2022, The Markup revealed that dozens of hospital websites shared information with Facebook's parent company, Meta, through a tool called the Meta Pixel. The hospitals faced scrutiny from Congress and legal action. Another Markup investigation found trackers logging information about online drugstore visitors purchasing HIV tests and Plan B. In 2023, a New York hospital agreed to pay a $300,000 fine for violations of the Health Insurance Portability and Accountability Act, or HIPAA.In response to a series of incidents, the Department of Health and Human Services said in 2023 that use of social media trackers to log health information could violate HIPAA, although recent court decisions have narrowed how the law can be applied against companies that use those trackers. Some plaintiffs have used state laws, like those in California, to argue that they should be compensated for having their health data sent to third parties without consent. Others have argued that this kind of tracking runs afoul of wiretapping or even racketeering laws. 'Organizations aren't investing enough time and resources into properly vetting everything,' said Haskell, who advises clients to be very careful about the information they track on their sites. 'When organizations are saying, 'we didn't understand that there's a certain configuration of this tool that we're using,' well, I can't really not put that on you.'
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Hill
7 hours ago
- The Hill
Why tariffs are already driving some healthcare premiums higher
Related video above: How patients and doctors can reduce healthcare costs (NEXSTAR) – Despite the focus on the price of cars, iPhones and other consumer goods, the Trump administration's tariffs are starting to drive up prices in an entirely different industry – healthcare. On Monday, Matt McGough, with nonprofit health policy organization KFF, wrote that several individual insurance companies have already notified state regulators that they will be raising premiums to offset the potential impact of tariffs on pharmaceuticals. Trump hasn't yet targeted pharmaceuticals with tariffs, but has repeatedly brought it up, including on Monday aboard Air Force One. 'We're going to be doing pharmaceuticals very soon,' Trump said, according to Reuters. 'That's going to bring all the companies back, into America.' In a May filing, the Independent Health Benefits Corporation (IHBC) said it was submitting a premium rate change of 38.4% for 2026, 'primarily due to increased costs due to inflation and tariffs, and changes in risk adjustment.' An IHBC spokesperson told Axios that roughly 3% of that increase was to directly account for the impact of tariffs, specifically on drug prices. McGough notes that there are other insurers who either haven't specifically mentioned the potential effect of tariffs or who declined to include an offsetting increase in 2026 premium rates. 'A large proportion of medical goods currently comes from international sources, including pharmaceuticals, medical devices and personal protective equipment, as well as other low-margin, high-use essentials like syringes, needles and blood pressure cuffs,' Tina Freese Decker, board chair of the American Hospital Association, wrote in a May post. 'Tariffs on these items could impact patient care by jeopardizing the availability of vital medications and essential health care devices. They also could raise costs for hospitals and heighten shortages and supply chain disruptions.' Meantime, millions of Affordable Care Act (ACA) enrollees could see an over 75% average increase in premiums if Biden-era subsidies aren't extended by Congress before they expire at the end of the year, according to KFF estimates. How much tariffs are weighing on the calculations of insurers will become a bit more clear on Aug. 1, Axios notes, when proposed 2026 premium rates are posted.
Newsweek
9 hours ago
- Newsweek
The Key to Better Sleep Is in Your Gut, Says Gastroenterologist
Based on facts, either observed and verified firsthand by the reporter, or reported and verified from knowledgeable sources. Newsweek AI is in beta. Translations may contain inaccuracies—please refer to the original content. Around 25 million U.S. adults suffer from insomnia. At the same time, more than 3.9 million Americans are taking probiotics, usually for gut health, according to the American Gastroenterological Association (AGA). And gut health could be the key to better sleep. A study published in the journal Engineering examined a specific probiotic strain called Lactobacillus helveticus CCFM1320. This probiotic produces a compound known as SAM (S-adenosylmethionine), which helps regulate the body's internal clock and supports the production of melatonin, a hormone that promotes sleep. The researchers found that this probiotic could significantly improve sleep quality. The Gut as a Second Brain Neuroscientist Dr. Chelsie Rohrscheib, the head of sleep at Wesper, a national home sleep disorder diagnostics company, told Newsweek: "The gut essentially acts as a secondary nervous system and creates and releases many crucial neurotransmitters, such as serotonin, which also help to regulate nervous system activity. "This allows for two-way communication between the gut and the brain, called the gut-brain axis. Healthy gut microbes are essential to keeping the gut healthy and functioning, and there is ample evidence that gut microbiota dysregulation can negatively impact the activity of the gut-brain axis. Because the brain is highly sensitive, this can lead to poor sleep quality." Stock image of a woman taking pills from her nightstand before bed. Stock image of a woman taking pills from her nightstand before bed. Liudmila Chernetska/iStock / Getty Images Plus Is CCFM1320 a Game-Changing Strain? To test the effectiveness of CCFM1320 in humans, scientists from Jiangnan University conducted a four-week study with 60 volunteers who experienced sleep difficulties. Participants were divided into two groups: one received the probiotic, while the other took a placebo. Results showed that those who consumed the probiotic had better sleep scores, lower levels of the stress hormone cortisol, and a healthier balance of gut bacteria. Additionally, the probiotic boosted the expression of genes involved in producing and utilizing SAM, a key factor in sleep and overall health. Strain-Specific Benefits Dr. Michel Bass, a board-certified gastroenterologist and the Founding Medical Director at Oshi Health in Philadelphia, Pennsylvania, emphasized the importance of strain specificity: "Not all probiotics are created equal. This study identified CCFM1320 as uniquely beneficial for sleep quality. This isn't a generic 'take-any-probiotic' situation—it's about strain-level specificity," Bass told Newsweek. "That's where a lot of public messaging needs to evolve. Just like different medications target different conditions, different strains do different things. And this one appears to enhance melatonin synthesis via SAM methylation—a novel pathway." Probiotic Supplements vs. Fermented Foods Stock image of an assortment of fresh vegetables and meats. Stock image of an assortment of fresh vegetables and meats. esilzengin/iStock / Getty Images Plus While fermented foods like yogurt, kimchi, and kefir are beneficial for general gut health, Bass explained that they may not provide targeted probiotic strains at therapeutic levels. "If someone wants to improve things like sleep quality or reduce stress hormones like cortisol, a strong, well-researched supplement—especially one with proven strains like CCFM1320—is usually more effective," he said. "That said, eating fermented foods is still a great daily habit and can complement targeted probiotic supplements." Jason Eastty, owner of Healthspan Longevity in Westborough, Massachusetts, and a nutrition specialist, added that overall good nutrition can combat poor sleep. "Having a nutrient deficiency—like low iron, magnesium, or vitamin D—can throw off your gut microbial balance, leading to poor sleep. Clinical trials have shown that correcting these deficiencies helps microbial diversity and improves sleep efficiency," Eastty said. He also emphasized that a whole-foods diet rich in fiber—from fruits, vegetables, legumes, nuts, seeds, and whole grains—is essential to feeding the "good" bacteria in your gut.
Miami Herald
10 hours ago
- Miami Herald
Fed study blasts few healthcare options in top U.S. tourism states
Romantic getaways. Family memories. Great escapes. We Americans love a good vacation. Don't miss the move: Subscribe to TheStreet's free daily newsletter You might be one of the millions lured this – and every – summer by a bold oceanfront, a lakeside fire pit or leafy mountain paths found in these popular tourism states. Related: Major health care company files for bankruptcy to sell assets Or maybe other seasonal adventures like world-class skiing, lush spring gardens or the simply fabulous foliage each autumn draw you and yours to these renowned venues any time of year. 'Cause there's also a ton of history, culture and sports to explore plus delicious local chow for the foodies. But beyond the cheery facades that welcome visitors are sad and scary realities that full-time residents face regarding year-round healthcare access in their rural communities. A new study by the Federal Reserve Bank of Boston spells out the first-hand accounts of mothers, children, elders and others challenged by distance, income, resources and other economic problems to receive healthcare that so many fellow Americans take for granted. The solutions don't seem to be short-term, straining hopes and accelerating chronic, life-threatening medical crises."Yep. It's a great place to visit but you wouldn't want to live here." Visitors to these states have heard this refrain from locals for decades, all the way back to the last century. Proximity to health care is an increasing concern in rural communities across America. As a result, patient care suffers. So do patients. Greater distances from primary care providers, community hospitals and trauma centers are linked to higher rates of fatal accidents, fatal heart attacks and infant mortality, according to Federal Reserve Bank of Boston senior policy analyst Riley Sullivan. Rural healthcare facilities are finding it more difficult to attract the skilled workforce to fill jobs at every level of skill. Reasons include lack of affordable or available housing and high costs of living magnified by the many, many miles from larger towns and bigger cities. Plus healthcare providers across America maintain that inadequate insurance, Medicaid or Medicare reimbursement rates are leading to major losses at private, public and not-for-profit facilities. Related: Major bankrupt healthcare provider closes distressed hospitals Overall, U.S. hospitals are finding that they have no choice but to cut services due to these acute financial challenges. Some even close because all options have simply run out, leaving their communities in medical deserts facing life-or-death choices 24-7. Boston Fed principal economist and policy advisor Mary Burke, who studies regional labor force participation rates, said all these issues add up to big strains on healthcare systems in Maine, New Hampshire and Vermont. Sullivan's study showed: Northern Light Health, Maine's second-largest health care system, lost a staggering $156 million in 2024. Northern Light Inland Hospital in Waterville (known for its ski resorts) closed earlier this year. In New Hampshire, Catholic Medical Center in Manchester reported monthly losses ranging from "$2 - $3 million," before it was sold in February Vermont, a state-mandated though disputed analysis found that its hospitals will need to find between $700 million and $2.4 billion to break even by 2028. "I think that when you look around the country in rural areas and you find thriving health care systems or hospitals, what you see are thriving communities, where economic development is strong," said Dr. Sunil Eappen, CEO of The University of Vermont Health Network. Economic development is the key to reversing these trends in Vermont and its two northern neighbors. Tourism dollars, though in the millions, just aren't enough. Eappen, also a member of the Boston Fed's Board of Directors, said potential catalysts – including improved infrastructure and more housing – would help stop the bleeding of healthcare access. But ultimately, it all comes down to one thing. "We need another 100-150,000 young people to move in who are working and paying into a commercial insurance population," Eappen said. "We need more people to move in." Related: Major hospital chain owner files for Chapter 11 bankruptcy The Arena Media Brands, LLC THESTREET is a registered trademark of TheStreet, Inc.
