{"id":603873,"date":"2023-02-02T07:48:45","date_gmt":"2023-02-02T13:48:45","guid":{"rendered":"https:\/\/news.sellorbuyhomefast.com\/index.php\/2023\/02\/02\/goodrx-made-money-off-your-health-data-the-ftc-is-making-it-pay\/"},"modified":"2023-02-02T07:48:45","modified_gmt":"2023-02-02T13:48:45","slug":"goodrx-made-money-off-your-health-data-the-ftc-is-making-it-pay","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2023\/02\/02\/goodrx-made-money-off-your-health-data-the-ftc-is-making-it-pay\/","title":{"rendered":"GoodRx made money off your health data. The FTC is making it pay."},"content":{"rendered":"
\n

GoodRx has not been very good at your privacy. And now the Federal Trade Commission has written an expensive prescription: a hefty fine and an agreement to implement various privacy protections.<\/p>\n

If you\u2019re one of the tens of millions of people who used GoodRx to find bargains on your medications, the drug discount and price-shopping website and app might have done a little more than you bargained for: It sent your sensitive health data to data brokers as well as tech companies like Meta and Google to use for advertising, according to the FTC.<\/p>\n

The FTC announced<\/a> on Wednesday that GoodRx has agreed to pay a $1.5 million fine and take various steps to ensure that it no longer shares health data for advertising purposes, that it obtains user consent to share health data for other reasons, and that it makes an effort to get the third parties with whom it previously shared data to delete that data. The move shows how committed the FTC is to protecting people from digital privacy violations, even as America lacks<\/a> federal privacy laws that would make that job a lot easier. It also shows just how leaky some of these services, which we entrust with our most private information, can be.<\/p>\n

The FTC alleges that GoodRx shared the names of medications users were looking for on the app, which medications users redeemed GoodRx coupons for at pharmacies, and which conditions they were using GoodRx\u2019s telehealth platform to get treatment for. GoodRx is also accused of sending lists, including identifying information, of users who purchased certain medications to Meta to then target those users with ads related to the conditions GoodRx knew they had. <\/p>\n

\u201cDigital health companies and mobile apps should not cash in on consumers\u2019 extremely sensitive and personally identifiable health information,\u201d Samuel Levine, director of the FTC\u2019s Bureau of Consumer Protection, said in a statement. \u201cThe FTC is serving notice that it will use all of its legal authority to protect American consumers\u2019 sensitive data from misuse and illegal exploitation.\u201d<\/p>\n

Some of GoodRx\u2019s practices were first exposed in February 2020 by reports from Consumer Reports<\/a> and Gizmodo<\/a>, which detailed how user data was being sent to third parties. At the time, GoodRx apologized, said the data wasn\u2019t used to target ads, and implemented some privacy controls. That seemed to be the end of it, as GoodRx operates in a digital privacy gray area<\/a>. Though it may collect the same data that pharmacies, doctors, and health insurance companies do, in most cases it\u2019s not beholden to the same health privacy laws \u2014 namely, HIPAA<\/a>, the Health Insurance Portability and Accountability Act. Even when HIPAA didn\u2019t apply to GoodRx, the FTC says that the company gave users the impression that it did by putting a little \u201cHIPAA\u201d icon on its website.<\/p>\n

Even entities that are covered by HIPAA seem to have trouble<\/a> protecting patient information from falling into the hands of data brokers and advertisers. But at least there\u2019s some legal recourse if they violate that law. HIPAA violations aren\u2019t under the FTC\u2019s purview, however \u2014 they\u2019re the job of the Health and Human Services Department\u2019s Office of Civil Rights. <\/p>\n

When websites and apps collect and mismanage health data that isn\u2019t covered by HIPAA, that might be a job for the FTC\u2019s consumer protection arm. When the period tracker app Flo Health<\/a> sent users\u2019 fertility information to data brokers despite promises that it wouldn\u2019t, the FTC went after the company for deceiving users. The FTC is also in the midst of an unfair or deceptive acts lawsuit<\/a> against Kochava, a data broker that the agency has accused of making people\u2019s personally identifiable and sensitive location data that could cause substantial harm easily available, while those people have no way of knowing that their data is being collected or used this way, let alone how to stop it.<\/p>\n

With GoodRx, things are a little different, as the FTC is using a rule it has never invoked before. The Health Breach Notification Rule<\/a> requires vendors of personal health records that aren\u2019t covered by HIPAA to notify consumers if their data has been accessed by a third party without consumers\u2019 authorization. It\u2019s been on the books since 2009, but the FTC never enforced it until now. The agency signaled a move like this would be coming in 2021, when it issued a warning<\/a> to health apps and connected devices that they must get their users\u2019 permission before disclosing their health data to third parties. <\/p>\n

This was both a clarification of the rule and a warning that the FTC was ready and willing to enforce it. Now it\u2019s made good on that threat for the first time. It likely won\u2019t be the last, given FTC Chair Lina Khan\u2019s stated commitment<\/a> to data privacy and the notoriously leaky<\/a> nature of apps and websites. But it should prompt some of these companies to make an effort to either better secure their users\u2019 health data or make it more clear to them how and why it\u2019s being shared with someone else, lest the hammer come down on them, too.<\/p>\n

GoodRx said in a statement<\/a> that its settlement with the FTC was over an \u201cold issue\u201d that it \u201caddressed almost three years ago, before the FTC inquiry began.\u201d It says it entered into the settlement to avoid expensive litigation and doesn\u2019t agree with how the FTC applied the Health Breach rule.<\/p>\n

\u201cWe do not agree with the FTC\u2019s allegations and we admit no wrongdoing,\u201d GoodRx said. \u201c[W]e had used vendor technologies to advertise in a way that we believe was compliant with all applicable regulations and that remains common practice among many health, consumer and government websites.\u201d<\/p>\n

The FTC\u2019s new order has to be approved by a federal court before it goes into effect. Assuming it is, the $1.5 million fine won\u2019t kill GoodRx, which reported<\/a> revenue of $745.42 million in 2021, the most recent year for which that data is available. But it\u2019s not nothing, either; despite pulling in almost three-quarters of a billion dollars, GoodRx ended the year with a net loss of $25.25 million. There are also the added costs of setting up all the compliance measures the FTC requires per the order, as well as however much revenue GoodRx loses as a result of users deciding to take their business elsewhere because they don\u2019t trust GoodRx to keep their data private. <\/p>\n

Consumers pay, too. For some of them, GoodRx disclosed their most sensitive information when they were at their most vulnerable: searching for a way to get medication they otherwise couldn\u2019t afford. They might not be so quick to use drug discount apps in the future now that they know at least one of them sent that data to Facebook.<\/p>\n

Update, 12:10 pm ET:<\/strong><\/em> This story has been updated to include GoodRx\u2019s statement.<\/em><\/p>\n

sa***********<\/span>@****<\/span>de.net<\/span>“,”short_author_bio”:”is a senior Vox reporter who covers data privacy, antitrust, and Big Tech\u2019s power over us all.”}],”byline_enabled”:true,”byline_credit_text”:”By”,”byline_serial_comma_enabled”:true,”comment_count”:0,”comments_enabled”:false,”legacy_comments_enabled”:false,”coral_comments_enabled”:false,”coral_comment_counts_enabled”:false,”commerce_disclosure”:null,”community_name”:”Vox”,”community_url”:”https:\/\/www.vox.com\/”,”community_logo”:”rnrn rn vox-mark<\/title>rn rn <\/defs>rn rn <\/path>rn <\/g>rn<\/svg>“,”cross_community”:false,”groups”:[{“base_type”:”EntryGroup”,”id”:80301,”timestamp”:1675337409,”title”:”Recode”,”type”:”SiteGroup”,”url”:”https:\/\/www.vox.com\/recode”,”slug”:”recode”,”community_logo”:”rnrn rn vox-mark<\/title>rn rn <\/defs>rn rn <\/path>rn <\/g>rn<\/svg>“,”community_name”:”Vox”,”community_url”:”https:\/\/www.vox.com\/”,”cross_community”:false,”entry_count”:22881,”always_show”:false,”description”:”Uncovering and explaining how our digital world is changing \u2014 and changing us.”,”disclosure”:””,”cover_image_url”:””,”cover_image”:null,”title_image_url”:”https:\/\/cdn.vox-cdn.com\/uploads\/chorus_asset\/file\/16201674\/REC_Wordmark_Red_RGB.0.png”,”intro_image”:null,”four_up_see_more_text”:”View All”,”primary”:true},{“base_type”:”EntryGroup”,”id”:27524,”timestamp”:1675271611,”title”:”Technology”,”type”:”SiteGroup”,”url”:”https:\/\/www.vox.com\/technology”,”slug”:”technology”,”community_logo”:”rnrn rn vox-mark<\/title>rn rn <\/defs>rn rn <\/path>rn <\/g>rn<\/svg>“,”community_name”:”Vox”,”community_url”:”https:\/\/www.vox.com\/”,”cross_community”:false,”entry_count”:2220,”always_show”:false,”description”:”How new technology is transforming cities and societies, from the latest apps to advances in renewable energy, computing, transportation, and more.”,”disclosure”:””,”cover_image_url”:””,”cover_image”:null,”title_image_url”:”https:\/\/cdn.vox-cdn.com\/uploads\/chorus_asset\/file\/22360844\/VoxTech_Highlight_2.gif”,”intro_image”:null,”four_up_see_more_text”:”View All”,”primary”:false},{“base_type”:”EntryGroup”,”id”:80397,”timestamp”:1675271611,”title”:”Privacy”,”type”:”SiteGroup”,”url”:”https:\/\/www.vox.com\/privacy”,”slug”:”privacy”,”community_logo”:”rnrn rn vox-mark<\/title>rn rn <\/defs>rn rn <\/path>rn <\/g>rn<\/svg>“,”community_name”:”Vox”,”community_url”:”https:\/\/www.vox.com\/”,”cross_community”:false,”entry_count”:376,”always_show”:false,”description”:””,”disclosure”:””,”cover_image_url”:””,”cover_image”:null,”title_image_url”:””,”intro_image”:null,”four_up_see_more_text”:”View All”,”primary”:false},{“base_type”:”EntryGroup”,”id”:102794,”timestamp”:1675271611,”title”:”Innovation”,”type”:”SiteGroup”,”url”:”https:\/\/www.vox.com\/innovation”,”slug”:”innovation”,”community_logo”:”rnrn rn vox-mark<\/title>rn rn <\/defs>rn rn <\/path>rn <\/g>rn<\/svg>“,”community_name”:”Vox”,”community_url”:”https:\/\/www.vox.com\/”,”cross_community”:false,”entry_count”:120,”always_show”:false,”description”:””,”disclosure”:””,”cover_image_url”:””,”cover_image”:null,”title_image_url”:””,”intro_image”:null,”four_up_see_more_text”:”View All”,”primary”:false}],”internal_groups”:[],”image”:{“ratio”:”*”,”original_url”:”https:\/\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929568\/GettyImages_1240746556.0.jpg”,”network”:”unison”,”bgcolor”:”white”,”pinterest_enabled”:false,”caption”:”Federal Trade Commission chair Lina Khan is finding new ways to take on an old problem: digital privacy.”,”credit”:”Tom Williams\/CQ-Roll Call, Inc via Getty Images”,”focal_area”:{“top_left_x”:4194,”top_left_y”:1997,”bottom_right_x”:5444,”bottom_right_y”:3247},”bounds”:[0,0,7822,5215],”uploaded_size”:{“width”:7822,”height”:5215},”focal_point”:null,”image_id”:71929568,”alt_text”:”Federal Trade Commission chair Lina Khan.”},”hub_image”:{“ratio”:”*”,”original_url”:”https:\/\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929568\/GettyImages_1240746556.0.jpg”,”network”:”unison”,”bgcolor”:”white”,”pinterest_enabled”:false,”caption”:”Federal Trade Commission chair Lina Khan is finding new ways to take on an old problem: digital privacy.”,”credit”:”Tom Williams\/CQ-Roll Call, Inc via Getty Images”,”focal_area”:{“top_left_x”:4194,”top_left_y”:1997,”bottom_right_x”:5444,”bottom_right_y”:3247},”bounds”:[0,0,7822,5215],”uploaded_size”:{“width”:7822,”height”:5215},”focal_point”:null,”image_id”:71929568,”alt_text”:”Federal Trade Commission chair Lina Khan.”},”lede_image”:{“ratio”:”*”,”original_url”:”https:\/\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg”,”network”:”unison”,”bgcolor”:”white”,”pinterest_enabled”:false,”caption”:”Federal Trade Commission chair Lina Khan is finding new ways to take on an old problem: digital privacy.”,”credit”:”Tom Williams\/CQ-Roll Call, Inc via Getty Images”,”focal_area”:{“top_left_x”:4194,”top_left_y”:1997,”bottom_right_x”:5444,”bottom_right_y”:3247},”bounds”:[0,0,7822,5215],”uploaded_size”:{“width”:7822,”height”:5215},”focal_point”:null,”image_id”:71929569,”alt_text”:”Federal Trade Commission chair Lina Khan.”},”group_cover_image”:null,”picture_standard_lead_image”:{“ratio”:”*”,”original_url”:”https:\/\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg”,”network”:”unison”,”bgcolor”:”white”,”pinterest_enabled”:false,”caption”:”Federal Trade Commission chair Lina Khan is finding new ways to take on an old problem: digital privacy.”,”credit”:”Tom Williams\/CQ-Roll Call, Inc via Getty Images”,”focal_area”:{“top_left_x”:4194,”top_left_y”:1997,”bottom_right_x”:5444,”bottom_right_y”:3247},”bounds”:[0,0,7822,5215],”uploaded_size”:{“width”:7822,”height”:5215},”focal_point”:null,”image_id”:71929569,”alt_text”:”Federal Trade Commission chair Lina Khan.”,”picture_element”:{“html”:{},”alt”:”Federal Trade Commission chair Lina Khan.”,”default”:{“srcset”:”https:\/\/cdn.vox-cdn.com\/thumbor\/sxrOyxUCqdCyfwMzUQtB4xVVnys=\/0x0:7822×5215\/320×240\/filters:focal(4194×1997:5444×3247)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 320w, https:\/\/cdn.vox-cdn.com\/thumbor\/HkdpjM6-XLWnJ1JlDiRQeS1a6T8=\/0x0:7822×5215\/620×465\/filters:focal(4194×1997:5444×3247)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 620w, https:\/\/cdn.vox-cdn.com\/thumbor\/zhRtsR5jW_h2zrtAyM0iCnGMNI0=\/0x0:7822×5215\/920×690\/filters:focal(4194×1997:5444×3247)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 920w, https:\/\/cdn.vox-cdn.com\/thumbor\/pNkZwRUAhWdQdFZuZQdz5E3W1D4=\/0x0:7822×5215\/1220×915\/filters:focal(4194×1997:5444×3247)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 1220w, https:\/\/cdn.vox-cdn.com\/thumbor\/yvEnI9twLxU7A11oYEuH2dPHuhU=\/0x0:7822×5215\/1520×1140\/filters:focal(4194×1997:5444×3247)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 1520w”,”webp_srcset”:”https:\/\/cdn.vox-cdn.com\/thumbor\/b38J2XDmi1DoDtyiLhI8y-VhCfc=\/0x0:7822×5215\/320×240\/filters:focal(4194×1997:5444×3247):format(webp)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 320w, https:\/\/cdn.vox-cdn.com\/thumbor\/xKT4F1Lzksew6sLQQBQAZ1HbSgA=\/0x0:7822×5215\/620×465\/filters:focal(4194×1997:5444×3247):format(webp)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 620w, https:\/\/cdn.vox-cdn.com\/thumbor\/oQEJXW6oeu9SxqEleIvcLBDmQSA=\/0x0:7822×5215\/920×690\/filters:focal(4194×1997:5444×3247):format(webp)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 920w, https:\/\/cdn.vox-cdn.com\/thumbor\/MmpjR7cX66JfbP-U4UJTXaiy3mA=\/0x0:7822×5215\/1220×915\/filters:focal(4194×1997:5444×3247):format(webp)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 1220w, https:\/\/cdn.vox-cdn.com\/thumbor\/7erWicpQ2qp9WRT1QuhIPMsY0ys=\/0x0:7822×5215\/1520×1140\/filters:focal(4194×1997:5444×3247):format(webp)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg 1520w”,”media”:null,”sizes”:”(min-width: 809px) 485px, (min-width: 600px) 60vw, 100vw”,”fallback”:”https:\/\/cdn.vox-cdn.com\/thumbor\/3YFvAgbGgDiI7wPeuEo0WT8DwGM=\/0x0:7822×5215\/1200×900\/filters:focal(4194×1997:5444×3247)\/cdn.vox-cdn.com\/uploads\/chorus_image\/image\/71929569\/GettyImages_1240746556.0.jpg”},”art_directed”:[]}},”image_is_placeholder”:false,”image_is_hidden”:false,”network”:”vox”,”omits_labels”:true,”optimizable”:false,”promo_headline”:”GoodRx made money off your health data.\u00a0The FTC is making it pay.”,”recommended_count”:0,”recs_enabled”:false,”slug”:”recode\/23581260\/goodrx-ftc-privacy”,”dek”:”More like BadRx.”,”homepage_title”:”GoodRx made money off your health data.\u00a0The FTC is making it pay.”,”homepage_description”:”More like BadRx.”,”show_homepage_description”:false,”title_display”:”GoodRx made money off your health data.\u00a0The FTC is making it pay.”,”pull_quote”:null,”voxcreative”:false,”show_entry_time”:true,”show_dates”:true,”paywalled_content”:false,”paywalled_content_box_logo_url”:””,”paywalled_content_page_logo_url”:””,”paywalled_content_main_url”:””,”article_footer_body”:”Millions turn to Vox to educate themselves, their family, and their friends about what\u2019s happening in the world around them, and to learn about things that spark their curiosity. Financial contributions from our readers are a critical part of supporting our resource-intensive work and help us keep our journalism free for all. rn Please consider making a one-time contribution to Vox today.rn<\/a>“,”article_footer_header”:”Will you support Vox\u2019s explanatory journalism?<\/a>“,”use_article_footer”:true,”article_footer_cta_annual_plans”:”{rn “default_plan”: 1,rn “plans”: [rn {rn “amount”: 95,rn “plan_id”: 74295rn },rn {rn “amount”: 120,rn “plan_id”: 81108rn },rn {rn “amount”: 250,rn “plan_id”: 77096rn }rn ]rn}”,”article_footer_cta_button_annual_copy”:”year”,”article_footer_cta_button_copy”:”Yes, I’ll give”,”article_footer_cta_button_monthly_copy”:”month”,”article_footer_cta_default_frequency”:”annual”,”article_footer_cta_monthly_plans”:”{rn “default_plan”: 1,rn “plans”: [rn {rn “amount”: 9,rn “plan_id”: 77780rn },rn {rn “amount”: 20,rn “plan_id”: 69279rn },rn {rn “amount”: 50,rn “plan_id”: 46947rn }rn ]rn}”,”article_footer_cta_once_plans”:”{rn “default_plan”: 0,rn “plans”: [rn {rn “amount”: 20,rn “plan_id”: 69278rn },rn {rn “amount”: 50,rn “plan_id”: 48880rn },rn {rn “amount”: 100,rn “plan_id”: 46607rn }rn ]rn}”,”use_article_footer_cta_read_counter”:true,”use_article_footer_cta”:true,”featured_placeable”:false,”video_placeable”:false,”disclaimer”:null,”volume_placement”:”lede”,”video_autoplay”:false,”youtube_url”:”http:\/\/bit.ly\/voxyoutube”,”facebook_video_url”:””,”play_in_modal”:true,”user_preferences_for_privacy_enabled”:false,”show_branded_logos”:true}”><\/p>\n
\n

\n $95<\/span>\/year<\/span>\n <\/p>\n

<\/label><\/p>\n

\n $120<\/span>\/year<\/span>\n <\/p>\n

<\/label><\/p>\n

\n $250<\/span>\/year<\/span>\n <\/p>\n

<\/label><\/p>\n

Other<\/span>
\n <\/label>\n <\/p>\n<\/p><\/div>\n

<\/p>\n

\n Yes, I’ll give $120\/year<\/span>\n <\/p>\n

<\/a><\/p>\n

\n Yes, I’ll give $120\/year<\/span>\n <\/p>\n

\n

\n
\n We accept credit card, Apple Pay, and
\n <\/span>
\n
\n Google Pay. You can also contribute via
\n <\/span>\n <\/p>\n


\n
\n <\/a>\n <\/p>\n<\/div><\/div>\n<\/div>\n

Read More<\/a>
\n Tami Stoval<\/p>\n","protected":false},"excerpt":{"rendered":"

GoodRx has not been very good at your privacy. And now the Federal Trade Commission has written an expensive prescription: a hefty fine and an agreement to implement various privacy protections. If you\u2019re one of the tens of millions of people who used GoodRx to find bargains on your medications, the drug discount and price-shopping<\/p>\n","protected":false},"author":1,"featured_media":603874,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[118733,1410,46],"tags":[],"class_list":["post-603873","post","type-post","status-publish","format-standard","has-post-thumbnail","category-goodrx","category-money","category-technology"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/603873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=603873"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/603873\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/603874"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=603873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=603873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=603873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}