Quote:
Originally Posted by lisarea
I'm pretty sure those probably do have a HIPAA waiver, which is why I don't use them at the pharmacy.
What happened is that I got a fucking GoodRX card in the mail, with my name and an individual identifier on it, and NO DISCLOSURE at all. Just some small print with the URL for their privacy policy. GoodRX is not a covered entity, and their privacy policy does waive your HIPAA rights to any medical information they capture. And you "agree" to this by using the card. The card that you got, unsolicited, in the mail, with your name on it and no disclosure of this at all.
I'm about 95% sure that pharmacy provided my contact info at least to them for marketing, based on the pattern in my very small sample group of who got these cards and who didn't. The only people so far who've gotten those cards were people who use that pharmacy and don't use those cards already.
|
I use

to catalog the many times I have told people so.
FTC fines GoodRx for sharing consumer health data with advertisers - The Verge