How one state sent residents' personal health data to LinkedIn
The website that lets Californians shop for health insurance under the Affordable Care Act, coveredca.com, has been sending sensitive data to LinkedIn, forensic testing by The Markup has revealed.
As visitors filled out forms on the website, trackers on the same pages told LinkedIn their answers to questions about whether they were blind, pregnant, or used a high number of prescription medications. The trackers also monitored whether the visitors said they were transgender or possible victims of domestic abuse.
Covered California, the organization that operates the website, removed the trackers as The Markup and CalMatters reported this article. The organization said they were removed "due to a marketing agency transition" in early April.
In a statement, Kelly Donohue, a spokesperson for the agency, confirmed that data was sent to LinkedIn as part of an advertising campaign. Since being informed of the tracking, "all active advertising-related tags across our website have been turned off out of an abundance of caution," she added.
"Covered California has initiated a review of our websites and information security and privacy protocols to ensure that no analytics tools are impermissibly sharing sensitive consumer information," Donohue said, adding that they would "share additional findings as they become available, taking any necessary steps to safeguard the security and privacy of consumer data."
Visitors who filled out health information on the site may have had their data tracked for more than a year, according to Donohue, who said the LinkedIn campaign began in February 2024.
The Markup observed the trackers directly in February and March of this year. It confirmed most ad trackers, including the Meta "pixel" tracker, as well as all third-party cookies, have been removed from the site as of April 21.
Since 2014, more than 50 million Americans have signed up for health insurance through state exchanges like Covered California. They were set up under the Affordable Care Act, signed into law by President Barack Obama 15 years ago. States can either operate their exchange websites in partnership with the federal government or independently, as California does.
Covered California operates as an independent entity within the state government. Its board is appointed by the governor and Legislature.
In March, Covered California announced that, after four years of increasing enrollment, a record of nearly 2 million people were covered by health insurance through the program. In all, the organization said, about one in six Californians were at one point enrolled through Covered California. Between 2014 and 2023, the uninsured rate fell from 17.2% to 6.4%, according to the organization, the largest drop of any state during that time period. This coincided with a series of eligibility expansions to Medi-Cal, the state's health insurance program for lower-income households.
Experts expressed alarm at the idea that those millions of people could have had sensitive health data sent to a private company without their knowledge or consent. Sara Geoghegan, senior counsel at the Electronic Privacy Information Center, said it was "concerning and invasive" for a health insurance website to be sending data that was "wholly irrelevant" to the uses of a for-profit company like LinkedIn.
"It's unfortunate," she said, "because people don't expect that their health information will be collected and used in this way."
The Markup and CalMatters in recent months scanned for trackers on hundreds of California state and county government websites that offer services for undocumented immigrants using Blacklight, an automated tool developed by The Markup for auditing website trackers.
The Markup found that Covered California had more than 60 trackers on its site. Out of more than 200 of the government sites, the average number of trackers on the sites was three. Covered California had dozens more than any other website we examined.
On coveredca.com, trackers from well-known social media firms like Meta collected information on visitor page views, while lesser-known analytics and media campaign companies like email marketing company LiveIntent also followed users across the site.
But by far the most sensitive information was transmitted to LinkedIn.
While some of the data sent to LinkedIn was relatively innocuous, such as what pages were visited, Covered California also sent the company detailed information when visitors selected doctors to see if they were covered by a plan, including their specialization. The site also told LinkedIn if someone searched for a specific hospital.
In addition to demographic information including gender, the site also shared details with LinkedIn when visitors selected their ethnicity and marital status, and when they told coveredca.com how often they saw doctors for surgery or outpatient treatment.
LinkedIn, like other large social media firms, offers a way for websites to easily transmit data on their visitors through a tracking tool that the sites can place on their pages. In LinkedIn's case, this tool is called the Insight Tag. By using the tag, businesses and other organizations can later target advertisements on LinkedIn to consumers that have already shown interest in their products or services. For an e-commerce site, a tracker on a page might be able to note when someone added a product to their cart, and the business can then send ads for that product to the same person on their social media feeds.
A health care marketplace like Covered California might use the trackers to reach a group of people who might be interested in a reminder of a deadline for open health insurance enrollment, for example.
In its statement, Covered California noted the usefulness of these tools, saying the organization "leverages LinkedIn's advertising platform tools to understand consumer behavior and deliver tailored messages to help them make informed decisions about their health care options."
Trackers can also be valuable to the social media companies that offer them. In addition to driving ad sales, they provide an opportunity to gather information on visitors to websites other than their own.
On its informational page about the Insight Tag, LinkedIn places the burden on websites that employ the tag not to use it in risky situations. The tag "should not be installed on web pages that collect or contain Sensitive Data," the page advises, including "pages offering specific health-related or financial services or products to consumers."
LinkedIn spokesperson Brionna Ruff said in an emailed statement, "Our Ads Agreement and documentation expressly prohibit customers from installing the Insight Tag on web pages that collect or contain sensitive data, including pages offering health-related services. We don't allow advertisers to target ads based on sensitive data or categories."
Collection of sensitive information by social media trackers has in previous instances led to removal of the trackers, lawsuits, and scrutiny by state and federal lawmakers.
For example, after The Markup in 2022 revealed the Department of Education sent personal information to Facebook when students applied for college financial aid online, the department turned off the sharing, faced questions from two members of Congress, and was sued by two advocacy groups who sought more information about the sharing. Other stories in the same series about trackers, known as the Pixel Hunt, also led to changes and blowback, including a crackdown by the Federal Trade Commission on telehealth companies transmitting personal information to companies including Meta and Google without user consent and proposed class action lawsuits over information shared through trackers with drug stores, health providers, and tax prep companies.
LinkedIn is already facing multiple proposed class-action lawsuits related to the collection of medical information. In October, three new lawsuits in California courts alleged that LinkedIn violated users' privacy by collecting information on medical appointment sites, including for a fertility clinic.
Social media companies' tracking practices have underpinned the tremendous growth of the tech industry, but few web users are aware of how far the tracking goes. "This absolutely contradicts the expectation of the average consumer," Geoghegan said.
In California, a law called the California Confidentiality of Medical Information Act governs the privacy of medical information in the state. Under the act, consumers must give permission to some organizations before their medical information is disclosed to third parties. Companies have faced litigation under the law for using web tracking technologies, although those suits have not always been successful.
Geoghegan said current protections like these don't go far enough in helping consumers protect their sensitive data.
"This is an exact example of why we need better protections," she said of LinkedIn receiving the data. "This is sensitive health information that consumers expect to be protected and a lack of regulations is failing us."
This story was produced by The Markup and reviewed and distributed by Stacker.
Hashtags

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
38 minutes ago
- Yahoo
CDC firings: Former director, fired vaccine panelist on RFK Jr's changes
(NewsNation) — While Health and Human Services Secretary Robert F. Kennedy Jr. says he wanted to restore public trust by firing the entire vaccine advisory panel at the Centers for Disease Control and Prevention, one person he fired says Kennedy did the opposite in the academic community. The Advisory Committee on Immunization Practices members was made up of medical and health professionals who made recommendations on the safety and use of vaccines. One of the 17 panelists fired is Dr. Noel Brewer, who joined NewsNation's 'CUOMO' on Tuesday night. 'My concern is that we've taken 60 years of efforts to build trust among health care providers in the recommendations of the advisory committee through CDC, and that trust just evaporated overnight,' Brewer said. 'It is going to be hard to get that back.' The committee was set to meet in two weeks to discuss COVID-19 and other vaccines. Judge determined OPM broke law with DOGE access to data 'I don't think most Americans even care that much about it. And now that there's all this news and people like me out from our ivory towers, it's generating interest,' Brewer said. 'But I don't think that the impact here is going to be primarily among the general public.' Dr. Robert Redfield was CDC director under the first Trump administration, and he said the public lost trust in the power of vaccines. 'I believe vaccines are the most important gift of science to modern medicine. When I was CDC director, I was very disturbed that over half of the population didn't get the flu vaccine,' he said. 'Then, the COVID pandemic came, and I have to say, although I have a lot of respect for Noel and the other people on the committee, the reality is the guidance that came out of the ACIP for COVID vaccines, I think in general, was ill-advised.' Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Yahoo
4 hours ago
- Yahoo
Harrisburg restaurants react to Food Allergy Safety Legislation
HARRISBURG, Pa. (WHTM) — Right now there is no legislation in Pennsylvania that requires menus to have food allergy disclaimers. A bill to change that already passed the House. Restaurants abc27 spoke with agree the changes it would make are needed. House Bill 77 would also require restaurants to display a poster for their employees and have food allergy safety training. Millworks menu items that contain nuts or gluten are labeled. Front of House Manager Freddy Arundel says more and more customers are coming in with food allergies, which already prompted the restaurant to take precautions. 'The staff is trained to alert the kitchen about the allergies,' Arundel says. 'It's also flagged in our system on every ticket, so everyone who sees what's going on anywhere in the process and it's prepared separately and taken to the guest separately as well. Sauce Boss owner Sheri Tolomeo says gluten would be the main concern at her restaurant and she wouldn't mind updating her menus to disclose that. 'We could educate the people on it and then people can feel more comfortable when they come in ordering things because they know exactly what they're getting,' Tolomeo says. 'We can mix and match and make something that accommodates someone with an allergy.' Close Thanks for signing up! Watch for us in your inbox. Subscribe Now More than 33 million Americans have food allergies. That includes over one million in Pennsylvania. Bill sponsors say restaurants and other food retail facilities are the source of nearly half of all food allergy deaths. In a press conference on Tuesday, Kathy Briden spoke about her son Matthew who had a peanut allergy and died at age 28 after an accidental exposure. 'With a practical law in place, individuals and families living with food allergy may be more willing to extend trust when dining out, allowing Pennsylvania restaurants reap the economic benefits,' says Sung Poblete, chief executive officer of FARE (Food Allergy Research & Education). 'Ultimately, it is on the patron to inform the staff, but when the staff doesn't know what's in the food and just how deadly some of these reactions can be, we think that's the whole premise of House Bill 77,' says Rep. Natalie Mihalek (R-Allegheny and Washington Counties). House Bill 77 passed with bipartisan support in the House. Sen. Judith Schwank said in the Tuesday press conference that she's working on getting the Agriculture and Rural Affairs committee she co-chairs to get it on their agenda. Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Yahoo
4 hours ago
- Yahoo
Trump admin approves waivers for 3 states to ban soda, other junk food from public food programs
Department of Agriculture Secretary Brooke Rollins signed waivers with three states on Tuesday, allowing them to prohibit participants of the government's Supplemental Nutrition Assistance Program (SNAP) from buying junk food, like soda and candy, through the social welfare program. Arkansas, Idaho and Utah became the latest states to obtain waivers from the federal government to begin banning junk food within the federally administered, but state-operated, public assistance program that provides food stamps to low-income individuals. The three states have become the latest to obtain waivers from the Trump administration that allow states to restrict what type of food SNAP funds are eligible to be used on. Other mostly GOP-led states, like Nebraska, Indiana and Iowa, have also obtained waivers to reform their SNAP programs. Last month, during a Make America Healthy Again (MAHA) event at the White House, Rollins indicated that several states were lining up to get the waivers. Nebraska Becomes First State Approved To Ban Soda Purchases With Food Stamps "Since my confirmation, [the U.S. Department of Agriculture (USDA)] has encouraged states to think differently and creatively about how to solve the many health issues facing Americans," Rollins said at a press conference announcing the new waivers Tuesday afternoon. "One way is disallowing taxpayer-funded benefits to purchase unhealthy items, like soda, candy and other junk food." Read On The Fox News App Tuesday's waivers bring the total number of states that have moved to ban junk food from their SNAP programs to six. Rollins indicated several other states, including Colorado, Kansas, West Virginia, Texas, Ohio, Florida and Louisiana, are also working through procedural steps in hopes of getting waivers approved. West Virginia Passes First-of-its-kind Law Banning Food Dyes And Preservatives; Gov Cites Maha Movement Texas, however, may not even need the waiver after its legislature passed Senate Bill 379 during the last week of its legislative session that ended on June 2. The new bill, which prohibits SNAP participants in the state from using the public assistance program to buy junk food, is expected to be signed by Republican Gov. Greg Abbott, especially after he wrote a letter to Rollins in May seeking a USDA waiver. "The Trump Administration is unified in improving the health of our nation. America's governors have proudly answered the call to innovate by improving nutrition programs, ensuring better choices while respecting the generosity of the American taxpayer," Rollins added Tuesday. "Each waiver submitted by the states and signed is yet another step closer to fulfilling President [Donald] Trump's promise to Make America Healthy Again." On average, 42 million low-income Americans receive food-stamp assistance each month, according to the MAHA report released last month. It added that one-in-five American children under 17 receive SNAP article source: Trump admin approves waivers for 3 states to ban soda, other junk food from public food programs