How one state sent residents' personal health data to LinkedIn
The website that lets Californians shop for health insurance under the Affordable Care Act, coveredca.com, has been sending sensitive data to LinkedIn, forensic testing by The Markup has revealed.
As visitors filled out forms on the website, trackers on the same pages told LinkedIn their answers to questions about whether they were blind, pregnant, or used a high number of prescription medications. The trackers also monitored whether the visitors said they were transgender or possible victims of domestic abuse.
Covered California, the organization that operates the website, removed the trackers as The Markup and CalMatters reported this article. The organization said they were removed "due to a marketing agency transition" in early April.
In a statement, Kelly Donohue, a spokesperson for the agency, confirmed that data was sent to LinkedIn as part of an advertising campaign. Since being informed of the tracking, "all active advertising-related tags across our website have been turned off out of an abundance of caution," she added.
"Covered California has initiated a review of our websites and information security and privacy protocols to ensure that no analytics tools are impermissibly sharing sensitive consumer information," Donohue said, adding that they would "share additional findings as they become available, taking any necessary steps to safeguard the security and privacy of consumer data."
Visitors who filled out health information on the site may have had their data tracked for more than a year, according to Donohue, who said the LinkedIn campaign began in February 2024.
The Markup observed the trackers directly in February and March of this year. It confirmed most ad trackers, including the Meta "pixel" tracker, as well as all third-party cookies, have been removed from the site as of April 21.
Since 2014, more than 50 million Americans have signed up for health insurance through state exchanges like Covered California. They were set up under the Affordable Care Act, signed into law by President Barack Obama 15 years ago. States can either operate their exchange websites in partnership with the federal government or independently, as California does.
Covered California operates as an independent entity within the state government. Its board is appointed by the governor and Legislature.
In March, Covered California announced that, after four years of increasing enrollment, a record of nearly 2 million people were covered by health insurance through the program. In all, the organization said, about one in six Californians were at one point enrolled through Covered California. Between 2014 and 2023, the uninsured rate fell from 17.2% to 6.4%, according to the organization, the largest drop of any state during that time period. This coincided with a series of eligibility expansions to Medi-Cal, the state's health insurance program for lower-income households.
Experts expressed alarm at the idea that those millions of people could have had sensitive health data sent to a private company without their knowledge or consent. Sara Geoghegan, senior counsel at the Electronic Privacy Information Center, said it was "concerning and invasive" for a health insurance website to be sending data that was "wholly irrelevant" to the uses of a for-profit company like LinkedIn.
"It's unfortunate," she said, "because people don't expect that their health information will be collected and used in this way."
The Markup and CalMatters in recent months scanned for trackers on hundreds of California state and county government websites that offer services for undocumented immigrants using Blacklight, an automated tool developed by The Markup for auditing website trackers.
The Markup found that Covered California had more than 60 trackers on its site. Out of more than 200 of the government sites, the average number of trackers on the sites was three. Covered California had dozens more than any other website we examined.
On coveredca.com, trackers from well-known social media firms like Meta collected information on visitor page views, while lesser-known analytics and media campaign companies like email marketing company LiveIntent also followed users across the site.
But by far the most sensitive information was transmitted to LinkedIn.
While some of the data sent to LinkedIn was relatively innocuous, such as what pages were visited, Covered California also sent the company detailed information when visitors selected doctors to see if they were covered by a plan, including their specialization. The site also told LinkedIn if someone searched for a specific hospital.
In addition to demographic information including gender, the site also shared details with LinkedIn when visitors selected their ethnicity and marital status, and when they told coveredca.com how often they saw doctors for surgery or outpatient treatment.
LinkedIn, like other large social media firms, offers a way for websites to easily transmit data on their visitors through a tracking tool that the sites can place on their pages. In LinkedIn's case, this tool is called the Insight Tag. By using the tag, businesses and other organizations can later target advertisements on LinkedIn to consumers that have already shown interest in their products or services. For an e-commerce site, a tracker on a page might be able to note when someone added a product to their cart, and the business can then send ads for that product to the same person on their social media feeds.
A health care marketplace like Covered California might use the trackers to reach a group of people who might be interested in a reminder of a deadline for open health insurance enrollment, for example.
In its statement, Covered California noted the usefulness of these tools, saying the organization "leverages LinkedIn's advertising platform tools to understand consumer behavior and deliver tailored messages to help them make informed decisions about their health care options."
Trackers can also be valuable to the social media companies that offer them. In addition to driving ad sales, they provide an opportunity to gather information on visitors to websites other than their own.
On its informational page about the Insight Tag, LinkedIn places the burden on websites that employ the tag not to use it in risky situations. The tag "should not be installed on web pages that collect or contain Sensitive Data," the page advises, including "pages offering specific health-related or financial services or products to consumers."
LinkedIn spokesperson Brionna Ruff said in an emailed statement, "Our Ads Agreement and documentation expressly prohibit customers from installing the Insight Tag on web pages that collect or contain sensitive data, including pages offering health-related services. We don't allow advertisers to target ads based on sensitive data or categories."
Collection of sensitive information by social media trackers has in previous instances led to removal of the trackers, lawsuits, and scrutiny by state and federal lawmakers.
For example, after The Markup in 2022 revealed the Department of Education sent personal information to Facebook when students applied for college financial aid online, the department turned off the sharing, faced questions from two members of Congress, and was sued by two advocacy groups who sought more information about the sharing. Other stories in the same series about trackers, known as the Pixel Hunt, also led to changes and blowback, including a crackdown by the Federal Trade Commission on telehealth companies transmitting personal information to companies including Meta and Google without user consent and proposed class action lawsuits over information shared through trackers with drug stores, health providers, and tax prep companies.
LinkedIn is already facing multiple proposed class-action lawsuits related to the collection of medical information. In October, three new lawsuits in California courts alleged that LinkedIn violated users' privacy by collecting information on medical appointment sites, including for a fertility clinic.
Social media companies' tracking practices have underpinned the tremendous growth of the tech industry, but few web users are aware of how far the tracking goes. "This absolutely contradicts the expectation of the average consumer," Geoghegan said.
In California, a law called the California Confidentiality of Medical Information Act governs the privacy of medical information in the state. Under the act, consumers must give permission to some organizations before their medical information is disclosed to third parties. Companies have faced litigation under the law for using web tracking technologies, although those suits have not always been successful.
Geoghegan said current protections like these don't go far enough in helping consumers protect their sensitive data.
"This is an exact example of why we need better protections," she said of LinkedIn receiving the data. "This is sensitive health information that consumers expect to be protected and a lack of regulations is failing us."
This story was produced by The Markup and reviewed and distributed by Stacker.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Business Journals
3 hours ago
- Business Journals
Employers: Use these guidelines to create benefits for the modern workforce
It's impossible to forget the disruption of the COVID-19 pandemic. It reshaped how we live and work, forcing companies to rapidly adapt to remote models and prioritize health and safety in new ways. The crisis made one thing clear for employers: Affordable, meaningful health care benefits are vital — not only for supporting employees but also for ensuring long-term business stability. In the post-pandemic workplace, high-deductible health plans (HDHPs) continue to present challenges, especially for hourly and lower-wage workers. Recruiting and retaining top talent now hinges on offering benefits that go beyond basic coverage — they must be affordable, accessible and relevant. Employers are shifting from cutting costs to investing in benefits that support the whole person. A new framework: Mind, body, money To meet the demands of today's workforce, I use a simple yet powerful framework to guide benefits strategy: Mind, body and money. These three pillars reflect the needs of employees and can help employers design plans that truly make a difference. 1. Mind: Prioritizing mental health Mental health challenges spiked during the pandemic, and they haven't gone away. Today, one in five adults report struggling with mental health, while nearly a third say they don't have a primary care provider (PCP), leading to overall poor well-being. Telehealth has provided a lifeline, but access to in-network mental health providers remains limited. The need for robust mental health support has never been greater, and addressing it must be a priority. 2. Body: Access and prevention Roughly a third of Americans lack a primary care provider (PCP), leading many to rely on urgent care instead. This not only drives up claim volume and employer costs but also increases the risk of chronic conditions going undetected. Consider this: nearly 40% of Americans are pre-diabetic, and managing diabetes can cost $8,000-$10,000 per person annually. For an employer with 50 employees, that could mean $200,000 in preventable expenses. It's critical to ensure employees have access to high-quality preventive care at a price they can afford. Prevention isn't just a health strategy — it's a financial one. 3. Money: Real incentives that work A recent survey by Imagine360 found that 25% of employees would accept a pay cut in exchange for better benefits. That's a powerful signal. But incentives must go beyond surface-level perks like gym memberships. Instead, they should encourage real engagement with health care — rewarding participation in preventive care, screenings and chronic condition management. At the same time, health care costs are climbing fast — especially when it comes to prescriptions. GLP-1 medications are up 200%-300% year over year, prompting employers to reassess pharmacy strategies. Real savings start with aligning incentives to promote smart utilization. The retirement factor Older employees are increasingly delaying retirement — not because they want to, but because they can't afford to stop working. 28% regularly find themselves out of money before payday arrives. 60% of full-time employees are stressed about finances. 56% of financially stressed employees spend three or more hours a week thinking about finances. Consultants must help employers address this early with smart retirement planning tools like 401(k) plans and Health Savings Accounts (HSAs). Financial wellness isn't a separate issue — it's deeply tied to mental and physical health. Supporting employees across all three areas helps ensure smoother, more cost-effective transitions into retirement. Implementing reference-based pricing, a sustainable cost strategy Reference-Based Pricing (RBP) has evolved significantly over the years. What was once viewed as a heavy lift for companies and employees is now gaining momentum as a sustainable solution to out-of-control health care costs, and a great experience for employees. Like HSAs, RBP has continued to garner more adoption — and it's delivering real results. With rising health care 'tariffs,' more employers are turning to RBP to regain control. For example, a nursing home with 800-900 employees implemented RBP and saw health care costs drop by 40%. Four years later, they've maintained those savings, and employees have embraced the model.* RBP is particularly effective for companies with high turnover or low plan engagement. It allows employers to lower deductibles and build a more budget-neutral benefits strategy. While switching any health plan carrier requires change management, the right consultants can guide the process and help ensure both employer and employee success. What consultants must do now It's time for consultants to step up. That means vetting vendors rigorously and recommending only those that align with the employer's core goals — whether it's improving retention, reducing costs or boosting care quality. Employees care deeply about their take-home pay and their health. If a benefit strategy isn't working for them, they'll leave. Strong benefits aren't nice to have — they're a competitive advantage and a critical part of your business strategy. Want to talk about building a smarter benefits strategy that works for your team and your budget? Connect with me on LinkedIn.
Buzz Feed
6 hours ago
- Buzz Feed
The 1 Thing That Food Experts Never Eat Or Drink While Traveling Abroad
When you're traveling abroad, you probably have a long list of must-sees and must-dos. Diarrhea, vomiting, and stomach cramps most definitely aren't on that list, but these digestive problems can be all too common. The Centers for Disease Control and Prevention estimates that 30% to 70% of vacationers get traveler's diarrhea, depending on where and when they go. The illness can often (but not always) be prevented by paying close attention to what you eat or drink, and by following the 'boil it, cook it, peel it or forget it' rule. 'Foodborne infections can strike at any time,' Leah Silberman, a registered dietitian with Medical Offices of Manhattan, told HuffPost. 'Traveling exposes you to new food sources, local food handling procedures, and different cleanliness standards. This raises your chances of coming into contact with infections or pollutants, against which your body may not have built protection.' Foods may also be contaminated with unsafe drinking water, or when handwashing isn't the norm or isn't done properly, said Mitzi Baum, CEO of the nonprofit Stop Foodborne Illness. Before traveling, it's a good idea to check the CDC's list of destinations, which highlights food or water safety issues, Baum said. Keep in mind, though, that you can get sick anywhere, including the US. About one in six Americans contract foodborne illness each year, which results in 3,000 deaths and 128,000 hospitalizations, according to the CDC. Travel enhances your risk of getting digestive issues, however. Along with not being acclimated to the foods or encountering different food-handling processes, jet lag and changes in climate can weaken your immune system, Silberman explained. Next time you travel, follow these tips for protecting yourself from traveler's diarrhea. Dietitians and food safety experts explain which foods are more likely to put you at risk for foodborne illness. What Is Traveler's Sickness? Traveler's diarrhea is the most common travel-related illness, and you get it by consuming tainted foods or drinks, according to the CDC. E. coli bacteria is the main culprit, Baum said, but travelers can also get sick from salmonella, shigella, or campylobacter. Viruses, like astrovirus, norovirus, and rotavirus, can also be to blame, as well as the parasite giardia. It often happens in instances of poor food handling, a lack of sanitation, or contaminated drinking water, Silberman said. Diarrhea, abdominal pain, cramping, nausea, vomiting, and fever are the most common symptoms of traveler's diarrhea, according to the Cleveland Clinic. Symptoms of viral or bacterial infections typically show up within six to 24 hours, but parasites can take a few weeks to show signs. The highest-risk destinations are Asia (except for Japan and South Korea), the Middle East, Africa, Mexico, and Central and South America, according to the CDC. Washing your hands frequently with soap and water, especially after using the bathroom and before eating, can reduce your risk, Baum said. Foods And Drinks To Avoid When Traveling Abroad You can actually get foodborne illness from any food or beverage. But some might be riskier than others, depending on where you travel. Food safety measures, sanitary standards, and culinary habits vary in different parts of the world, Silberman said. Your best bet is to research food safety and health risks for your destination. But here are some foods and drinks to consider avoiding. Raw fish and meat Raw meat and seafood are a 'big no-no,' according to Vanessa Rissetto, a registered dietitian and co-founder and CEO of Culina Health. 'We can't source where they came from, how long they've been out, and how they've been handled.' Rare steaks, tartare, sushi, ceviche or raw seafood, or inadequately prepared meat, fish, or seafood can increase your risk for consuming bacteria, parasites, or viruses, Silberman said. Fresh fruits and vegetables Fresh fruits and vegetables that seem to have been sitting out for a while could attract germs that might make you sick, Rissetto said. Opt for cooked produce when you can, which will ensure that it reaches temperatures high enough to kill pathogens. 'If you're going to eat fresh fruits and vegetables, they are safest when washed with potable water and peeled by the person who eats them,' Baum added. Also, choose fruits and vegetables with thick skins — like bananas, oranges or avocados — that can be peeled, Silberman said. 'Peel them yourself to reduce the possibility of eating pathogens.' Dairy Pasteurized milk and dairy products from sealed containers are usually safe to consume, according to the CDC. But unpasteurized items, including cheese, yogurt, or ice cream, are more likely to contain hazardous germs, like listeria, salmonella, or E. coli, Silberman said. It's also a good idea to avoid dairy that's been stored at room temperature or left out, such as cream for coffee. Tap water Alberto Masnovo / Getty Images Contaminated water is a big cause of traveler's diarrhea. 'Since pathogens aren't visible to the naked eye, it's hard to tell if the water is safe to drink,' Baum said. To learn about the safety of tap water in your destination, visit the CDC's travelers' health website, where you can search by country. Whenever you're not sure about the safety of water, drink factory-sealed bottled water and remove ice from your drinks, Baum said. You can also boil water for at least a minute. Be careful not to swallow any water in the shower if you're visiting a place where the water isn't safe to drink, and use bottled water to brush your teeth, Rissetto said. Certain types of street food DigiPub / Getty Images Sampling food from street vendors is a fun way to sample local cuisine, but the CDC warns that some may not adhere to the same safety practices — like hand-washing and checking food temperatures — as restaurants. It's always best to avoid foods and drinks that seem to be sitting around for a while. Items that come straight off a grill, for instance, that are piping hot and cooked are likely safer. What If You Get Sick While Traveling? If, despite your best efforts, you do get a case of traveler's diarrhea, it's usually not serious. But it can persist for a few days or a week (longer if it's caused by a parasite), ruining your trip. Silberman offered these tips for taking care of yourself if that happens: Stay hydrated. Diarrhea and vomiting can be dehydrating, so drink lots of bottled water or other safe fluids. Take an over-the-counter medication. Antidiarrheals, like loperamide (Imodium), or anti-nausea drugs, like dimenhydrinate (Dramamine), help relieve symptoms. Talk to a healthcare expert first, though, especially if you're taking other medications. See a doctor. If your symptoms aren't going away, they're severe, or you also have a fever, bloody stool, or dehydration, seek medical attention. Call your doctor when you get home if you still have symptoms or if you have an underlying medical condition. No one wants to get sick while traveling, of course. But remember that foodborne illness can happen anywhere, Rissetto noted. 'If we go on vacation overly worried about every single thing we're eating, we might not be able to truly enjoy the experience,' she said. 'You can determine what's right for you in the moment.'
Yahoo
7 hours ago
- Yahoo
Collins calls Kennedy's firing of vaccine experts ‘excessive'
Sen. Susan Collins (R-Maine) on Monday called Health and Human Services Secretary Robert F. Kennedy Jr.'s firing of all 17 experts on the U.S. Centers for Disease Control and Prevention's (CDC) vaccine panel 'excessive,' but she cautioned she needs to learn more about the decision. Kennedy announced the decision in an op-ed for The Wall Street Journal, catching many GOP lawmakers by surprise. 'I did not know that that had happened,' Collins, a senior member of the Senate Health, Education, Labor and Pensions (HELP) Committee, said. 'It seems to me to be excessive to ask for everybody's resignations, but I can't judge because I don't know who he's replacing them with.' The Maine senator said the CDC's vaccine advisory committee 'provided helpful guidance to the public on what they should do.' Collins said that Kennedy didn't promise members of the HELP Committee that he would keep the vaccine experts in place. 'I'm just learning about it for the first time,' she said. 'I don't know what the basis was.' Kennedy said in his Wall Street Journal column that he removed the experts so that President Trump could shape the membership of the committee. 'Without removing the current members, the current Trump administration would not have been able to appoint a majority of new members until 2028,' he wrote. Kennedy argued that vaccines have become 'a divisive issue in American politics' and that public confidence is waning' in health agencies, pharmaceutical companies and vaccines themselves. 'That is why, under my direction, the U.S. Department of Health and Human Services is putting the restoration of public trust above any pro- or antivaccine agenda. The public must know that unbiased science guides the recommendations from our health agencies. This will ensure the American people receive the safest vaccines possible,' he wrote. Senate Democratic Leader Chuck Schumer (N.Y.) in a statement blasted Kennedy's move as 'reckless.' 'RFK Jr. and the Trump administration are taking a wrecking ball to the programs that keep Americans safe and healthy. Firing experts that have spent their entire lives protecting kids from deadly disease is not reform — it's reckless, radical, and rooted in conspiracy, not science,' Schumer said in a statement. Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
