How one state sent residents' personal health data to LinkedIn
As visitors filled out forms on the website, trackers on the same pages told LinkedIn their answers to questions about whether they were blind, pregnant, or used a high number of prescription medications. The trackers also monitored whether the visitors said they were transgender or possible victims of domestic abuse.
Covered California, the organization that operates the website, removed the trackers as The Markup and CalMatters reported this article. The organization said they were removed "due to a marketing agency transition" in early April.
In a statement, Kelly Donohue, a spokesperson for the agency, confirmed that data was sent to LinkedIn as part of an advertising campaign. Since being informed of the tracking, "all active advertising-related tags across our website have been turned off out of an abundance of caution," she added.
"Covered California has initiated a review of our websites and information security and privacy protocols to ensure that no analytics tools are impermissibly sharing sensitive consumer information," Donohue said, adding that they would "share additional findings as they become available, taking any necessary steps to safeguard the security and privacy of consumer data."
Visitors who filled out health information on the site may have had their data tracked for more than a year, according to Donohue, who said the LinkedIn campaign began in February 2024.
The Markup observed the trackers directly in February and March of this year. It confirmed most ad trackers, including the Meta "pixel" tracker, as well as all third-party cookies, have been removed from the site as of April 21.
Since 2014, more than 50 million Americans have signed up for health insurance through state exchanges like Covered California. They were set up under the Affordable Care Act, signed into law by President Barack Obama 15 years ago. States can either operate their exchange websites in partnership with the federal government or independently, as California does.
Covered California operates as an independent entity within the state government. Its board is appointed by the governor and Legislature.
In March, Covered California announced that, after four years of increasing enrollment, a record of nearly 2 million people were covered by health insurance through the program. In all, the organization said, about one in six Californians were at one point enrolled through Covered California. Between 2014 and 2023, the uninsured rate fell from 17.2% to 6.4%, according to the organization, the largest drop of any state during that time period. This coincided with a series of eligibility expansions to Medi-Cal, the state's health insurance program for lower-income households.
Experts expressed alarm at the idea that those millions of people could have had sensitive health data sent to a private company without their knowledge or consent. Sara Geoghegan, senior counsel at the Electronic Privacy Information Center, said it was "concerning and invasive" for a health insurance website to be sending data that was "wholly irrelevant" to the uses of a for-profit company like LinkedIn.
"It's unfortunate," she said, "because people don't expect that their health information will be collected and used in this way."
The Markup and CalMatters in recent months scanned for trackers on hundreds of California state and county government websites that offer services for undocumented immigrants using Blacklight, an automated tool developed by The Markup for auditing website trackers.
The Markup found that Covered California had more than 60 trackers on its site. Out of more than 200 of the government sites, the average number of trackers on the sites was three. Covered California had dozens more than any other website we examined.
On coveredca.com, trackers from well-known social media firms like Meta collected information on visitor page views, while lesser-known analytics and media campaign companies like email marketing company LiveIntent also followed users across the site.
But by far the most sensitive information was transmitted to LinkedIn.
While some of the data sent to LinkedIn was relatively innocuous, such as what pages were visited, Covered California also sent the company detailed information when visitors selected doctors to see if they were covered by a plan, including their specialization. The site also told LinkedIn if someone searched for a specific hospital.
In addition to demographic information including gender, the site also shared details with LinkedIn when visitors selected their ethnicity and marital status, and when they told coveredca.com how often they saw doctors for surgery or outpatient treatment.
LinkedIn, like other large social media firms, offers a way for websites to easily transmit data on their visitors through a tracking tool that the sites can place on their pages. In LinkedIn's case, this tool is called the Insight Tag. By using the tag, businesses and other organizations can later target advertisements on LinkedIn to consumers that have already shown interest in their products or services. For an e-commerce site, a tracker on a page might be able to note when someone added a product to their cart, and the business can then send ads for that product to the same person on their social media feeds.
A health care marketplace like Covered California might use the trackers to reach a group of people who might be interested in a reminder of a deadline for open health insurance enrollment, for example.
In its statement, Covered California noted the usefulness of these tools, saying the organization "leverages LinkedIn's advertising platform tools to understand consumer behavior and deliver tailored messages to help them make informed decisions about their health care options."
Trackers can also be valuable to the social media companies that offer them. In addition to driving ad sales, they provide an opportunity to gather information on visitors to websites other than their own.
On its informational page about the Insight Tag, LinkedIn places the burden on websites that employ the tag not to use it in risky situations. The tag "should not be installed on web pages that collect or contain Sensitive Data," the page advises, including "pages offering specific health-related or financial services or products to consumers."
LinkedIn spokesperson Brionna Ruff said in an emailed statement, "Our Ads Agreement and documentation expressly prohibit customers from installing the Insight Tag on web pages that collect or contain sensitive data, including pages offering health-related services. We don't allow advertisers to target ads based on sensitive data or categories."
Collection of sensitive information by social media trackers has in previous instances led to removal of the trackers, lawsuits, and scrutiny by state and federal lawmakers.
For example, after The Markup in 2022 revealed the Department of Education sent personal information to Facebook when students applied for college financial aid online, the department turned off the sharing, faced questions from two members of Congress, and was sued by two advocacy groups who sought more information about the sharing. Other stories in the same series about trackers, known as the Pixel Hunt, also led to changes and blowback, including a crackdown by the Federal Trade Commission on telehealth companies transmitting personal information to companies including Meta and Google without user consent and proposed class action lawsuits over information shared through trackers with drug stores, health providers, and tax prep companies.
LinkedIn is already facing multiple proposed class-action lawsuits related to the collection of medical information. In October, three new lawsuits in California courts alleged that LinkedIn violated users' privacy by collecting information on medical appointment sites, including for a fertility clinic.
Social media companies' tracking practices have underpinned the tremendous growth of the tech industry, but few web users are aware of how far the tracking goes. "This absolutely contradicts the expectation of the average consumer," Geoghegan said.
In California, a law called the California Confidentiality of Medical Information Act governs the privacy of medical information in the state. Under the act, consumers must give permission to some organizations before their medical information is disclosed to third parties. Companies have faced litigation under the law for using web tracking technologies, although those suits have not always been successful.
Geoghegan said current protections like these don't go far enough in helping consumers protect their sensitive data.
"This is an exact example of why we need better protections," she said of LinkedIn receiving the data. "This is sensitive health information that consumers expect to be protected and a lack of regulations is failing us."
This story was produced by The Markup and reviewed and distributed by Stacker.
Hashtags

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


Atlantic
35 minutes ago
- Atlantic
The Reality My Medicaid Patients Face
The bus smashed into him last month, when he was crossing the street with his wheelchair. By the time he made it to the public hospital in California where I work as a doctor, two quarts of blood had hemorrhaged into one of his thighs, where a tender football-shaped bulge distorted the skin. He remembered his view of the windshield as the bus bore down, then, as he toppled, of the vehicle's dirty underbelly. He was convinced he'd die. He didn't. Trauma surgeons and orthopedists consulted on his case. He got CT scans, X-rays, and a blood transfusion. Social workers visited him, as did a nutritionist—he was underweight. Antibiotics mopped up the pneumonia he'd contracted from inhaling saliva when he'd passed out. He remained hospitalized for more than a week. This patient, fortunately, had Medicaid, which meant not only that his care was covered but also that he could see a primary-care doctor after discharge. The public hospital where I'm an internist would have treated him comprehensively regardless of his ability to pay. But in many places, uninsured patients might receive only emergency stabilization at the hospital, face bankrupting bills, and, unless they can pay out of pocket, be denied care at outpatient clinics. And because of work requirements that Congress just passed to restrict Medicaid, the number of uninsured people will quickly grow in the coming months and years. On the face of it, the requirement that Medicaid beneficiaries submit proof of employment shouldn't worry people like my patient. Over the course of his life, scoliosis has curved his spine so much that his shoulders hover a couple of feet in front of his legs when he stands, and he's relied on a wheelchair for more than a decade. His medical condition should exempt him. But he told our team that he lives in shelters, so he lacks a fixed address. He doesn't have a cellphone. He could access government websites at a public library, except that his request for a power wheelchair, which Medicaid will cover, hasn't been approved yet, and navigating the city in a standard one exhausts him. Plus, every time he leaves his stuff behind at the shelter to go somewhere, he told me, it's stolen. At present, he doesn't even own an official ID card. As a doctor in a hospital that serves the urban poor, I see patients who already face such a gantlet of obstacles that modest barriers to accessing government programs can effectively screen them out. The White House's stated aim with the changes is to reduce waste, fraud, and abuse. But according to projections from the nonpartisan Congressional Budget Office, nearly 12 million Americans will lose insurance by 2034 because of the impacts of the new legislation on Medicaid enrollment and restrictions on Affordable Care Act marketplaces. The safety-net institutions that serve many of the country's poorest residents cannot make up for the gap. Some hospitals will undoubtedly face financial disaster and close, especially in rural areas—leaving patients with even less ability to get treatment. Here's a representative sample of patients on Medicaid I've treated recently: a father bleeding into his brain who speaks a Chinese-minority dialect that required multiple conversations with interpreters to identify. A middle-aged man with type 1 diabetes who suffered a stroke that resulted in such severe memory deficits that he can't reliably remember to inject insulin. A day laborer with liver inflammation who works long hours in construction, often seven days a week, and who's paid in cash. A young woman with a fentanyl addiction who was too weak and exhausted from malnourishment to enroll in a drug-rehabilitation program. A patient with a dog bite and a skin infection who has ricocheted between low-wage restaurant jobs. Some of my patients are employed, as are more than two-thirds of adult Medicaid beneficiaries under age 65 without a disability. Others aren't—and within that group, every one of them would meet criteria for exemption from work requirements, among them medical inability to work, pregnancy, caretaking duties, enrollment in a substance-use treatment program, or at least half-time-student status. But whether because of language barriers, physical or cognitive disability, lack of internet or phone, or job instability, for all of these patients, overcoming additional bureaucratic barriers would be burdensome at best. For many of them, it would be nearly impossible. There's little reason to doubt that, with work requirements in place, many patients like mine will be removed from Medicaid even though they should qualify. After Arkansas deployed work requirements for Medicaid in 2018, for instance, more than two-thirds of the roughly 18,000 people who were disenrolled still should have qualified, according to one estimate. What The Atlantic 's Annie Lowery has called the time tax—'a levy of paperwork, aggravation, and mental effort imposed on citizens in exchange for benefits that putatively exist to help them'—falls disproportionately on those least likely to possess the connections, education, or resources to cut through an endless slog of canned hold music, pages that fail to load, and automated mazes of bureaucracy that dead-end before the caller can connect to a human. The time tax of proving employment will act as a gatekeeping device, excluding people from Medicaid while foisting the blame onto their shoulders. It is, in effect, engineered to save money with systems onerous enough to disenfranchise people from what they're entitled to. The bill will slash approximately $1 trillion from Medicaid by 2034, $325 billion of that because of work requirements, according to the latest Congressional Budget Office cost estimates. It will also waste a colossal amount of money creating the mechanisms to deny people care: Though Congress has allocated only $200 million in federal funding for implementing work requirements, the true cost of setting up and administering these systems will likely be many times more, perhaps as much as $4.9 billion, based on one estimate that drew from states that have tried to put in place such requirements. These cuts will play out differently in each state, and even within states. They'll gut rural health care in some locales, hurt dense urban neighborhoods in others, and hit the working poor everywhere. Their effects will be modulated by how cumbersome or efficient work-verification systems are, by the availability of insurance-eligibility workers, and by community outreach or lack thereof. But in every state, patients will suffer. That's the predictable consequence of legislation that saves money by letting Americans get sick.


CNBC
2 hours ago
- CNBC
Gen Z and millennials embrace health and wellness. These stocks could benefit
Americans are embracing health and wellness — and none more than Gen Z and millennials. People are spending more than $500 billion in the United States on wellness, and it is growing at 4% to 5% each year, according to McKinsey . Nearly 30% of Gen Zers and millennials said they are prioritizing wellness "a lot more" compared to a year ago, the report said. In comparison, 23% of the older generations replied the same. Bank of America's credit card data backs that up. Spending in fitness clubs, for example, has been rising across the board for several months, but it is Gen Z and millennials who are kicking it up a notch, said Bank of America analyst Alexander Perry. "We're seeing increased prioritization of fitness by these generations and they're behaving in ways that prior generations did not," he said in an interview with CNBC. "They're really prioritizing fitness first and foremost, but we also believe they're prioritizing other healthy ways of living, focused on healthy eating, drinking, aging, to name a few." For instance, the average Gen Z household spends 2.8 times more than baby boomers on fitness and allocates more than three times of their budget compared to the older cohort, he said. Foot traffic growth at fitness centers is also "well surpassing" that to bars and clubs, Perry said. "They're adopting different leisure activities on the weekends," he said. "The leisure-based activities that are seemingly healthy are what these younger generations are gravitating towards. We think this is pretty sticky and has pretty long-term implications." That coincides with the rise of spending on non-alcoholic beer and seltzer, which has averaged 28 points higher versus alcoholic equivalents since 2021, he noted. Last year, per capita alcohol consumption fell 3% year over year, bringing it to a 10% decline versus the peak in 2021, according to Bernstein. That's the lowest level the firm has seen since 1962. Meanwhile, the International Wine and Spirits Record (IWSR) has projected that non-alcoholic beer will overtake ale to become the second-largest beer category by volume worldwide this year. Still, after years of surveys showing the decline in alcoholic beverage consumption among the younger population, new data from IWSR is showing an uptick . Participation rates among Gen Z consumers have risen to 70% in the six months leading up to May, up from 46% two years ago, the drinks data and analytics provider said. Lastly, anti-aging and recovery products are also becoming popular among the cohort, Perry said. Google searches such as "cold plunge" and "red light therapy" are up significantly, he noted. Fitness club plays There are two fitness clubs poised to benefit from the focus on health and wellness by Gen Z and millennials, according to Bank of America's Perry. Life Time is a high-end fitness provider that is identifying fast-growing trends pretty quickly, he said. One of those is pickleball, which is the fastest-growing sport in the U.S. "They were pretty quick to identify the pickleball trend," Perry said. "They started repurposing parts of their clubs to pickleball courts, and now are one of the largest pickleball providers in the U.S." The company has also started getting into the cold-plunge tub trend, which will also bode well for its long-term tailwinds, he added. Life Time has an average analyst rating of overweight and about 30% upside to the average price target, according to FactSet. LTH YTD mountain Life Time year to date Meanwhile, Planet Fitness is well positioned for the trend as the largest provider at a value-oriented price point, Perry said. In fact, the company has a high penetration of first-time gym goers, he said. "Their penetration in terms of Gen Z and millennials coming into a Planet Fitness has continued to expand and been very strong," Perry said. The stock has an average rating of buy from the analysts covering it and roughly 7% upside to the average price target, per FactSet. Anti-aging opportunity SharkNinja is poised to capitalize on the anti-aging product trend with its light therapy mask CryoGlow, Perry said. The company was quick to identify the recent trend of healthy aging and red-light therapy face masks, he said. "If their past product portfolio is an example of what they're going to be rolling out, I think that you'll continue to see them play in this wellness space in a bigger way," Perry said. The stock has an average analyst rating of buy and 14% upside to the average price target, per FactSet. SN YTD mountain SharkNinja year to date The alcohol story While it is uncertain what the new uptick in Gen Z drinking habits may mean for alcohol stocks, it is clear that sales are on the decline overall. Morgan Stanley said that the Gen Z cohort will likely not match prior generations as it ages when it comes to drinking. The firm said wellness trends like weight-loss and diabetes drugs, as well as an overall negative perception of alcohol's health implications also play a part. Plus, the heavier drinkers are the older generations who will be physiologically unable to consume as much alcohol as they age, analyst Sarah Simon said in a note earlier this year. That means the zero-alcohol segment is "ripe for strong growth," she wrote. The stocks she likes are skewed towards soft drinks and beer. Her top pick in the U.S. is Coca- Cola . She also likes Belgian-based Anheuser-Busch InBev, which trades in the U.S. under ticker BUD . KO YTD mountain Coca-Cola year to date However, Bernstein analyst Nadine Sarwat doesn't expect the moderation of younger generations to remain permanent as they age. She also said economic pressure and the way social media has changed socializing has affected Gen Z's alcohol consumption. "Once they enter full working adulthood, they are reverting back to drinking patterns of previous people in working adulthood," she said. "What no one can agree on is why are they drinking less in those crucial years? Some of it is probably health and wellness. Some of it is probably social media, that it's changed socializing. Some of it is definitely economic pressure," Sarwat added.


Vox
2 hours ago
- Vox
Heart attacks aren't as fatal as they used to be
is a senior editorial director at Vox overseeing the climate teams and the Unexplainable and The Gray Area podcasts. He is also the editor of Vox's Future Perfect section and writes the Good News newsletter. He worked at Time magazine for 15 years as a foreign correspondent in Asia, a climate writer, and an international editor, and he wrote a book on existential risk. A day before my 47th birthday last month, I took the subway to Manhattan's Upper East Side for a coronary artery calcium scan (CAC). For those who haven't entered the valley of middle age, a CAC is a specialized CT scan that looks for calcium deposits in the heart and its arteries. Unlike in your bones, having calcium in your coronary arteries is a bad thing, because it indicates the buildup of plaque comprised of cholesterol, fat, and other lovely things. The higher the calcium score, the more plaque that has built up — and with it, the higher the risk of heart disease and even heart attacks. A couple of hours after the test, I received a ping on my phone. My CAC score was 7, which indicated the presence of a small amount of calcified plaque, which translates to a 'low but non-zero cardiovascular risk.' Put another way, according to one calculator, it means an approximately 2.1 percent chance of a major adverse cardiovascular event over the next 10 years. 2.1 percent doesn't sound high — it's a little higher than the chance of pulling an ace of spades from a card deck — but when it comes to major adverse cardiovascular events, 2.1 percent is approximately 100 percent higher than I'd like. That's how I found myself joining the tens of millions of Americans who are currently on statin drugs, which lower levels of LDL cholesterol (aka the 'bad' cholesterol). I didn't really want to celebrate my birthday with a numerical reminder of my creeping mortality. But everything about my experience — from the high-tech calcium scan to my doctor's aggressive statin prescription — explains how the US has made amazing progress against one of our biggest health risks: heart disease, and especially, heart attacks. A dramatic drop in heart attack deaths A heart attack — which usually occurs when atherosclerotic plaque partially or fully blocks the flow of blood to the heart — used to be close to a death sentence. In 1963, the death rate from coronary heart disease, which includes heart attacks, peaked in the US, with 290 deaths per 100,000 population. As late as 1970, a man over 65 who was hospitalized with a heart attack had only a 60 percent chance of ever leaving that hospital alive. A sudden cardiac death is the disease equivalent of homicide or a car crash death. It meant someone's father or husband, wife or mother, was suddenly ripped away without warning. Heart attacks were terrifying. Yet today, that risk is much less. According to a recent study in the Journal of the American Heart Association, the proportion of all deaths attributable to heart attacks plummeted by nearly 90 percent between 1970 and 2022. Over the same period, heart disease as a cause of all adult deaths in the US fell from 41 percent to 24 percent. Today, if a man over 65 is hospitalized with a heart attack, he has a 90 percent chance of leaving the hospital alive. By my calculations, the improvements in preventing and treating heart attacks between 1970 and 2022 have likely saved tens of millions of lives. So how did we get here? How to save a life In 1964, the year after the coronary heart disease death rate peaked, the US surgeon general released a landmark report on the risks of smoking. It marked the start of a decades-long public health campaign against one of the biggest contributing factors to cardiovascular disease. That campaign has been incredibly successful. In 1970, an estimated 40 percent of Americans smoked. By 2019, that percentage had fallen to 14 percent, and it keeps declining. The reduction in smoking has helped lower the number of Americans at risk of a heart attack. So did the development and spread in the 1980s of statins like I'm on now, which make it far easier to manage cholesterol and prevent heart disease. By one estimate, statins save nearly 2 million lives globally each year. When heart attacks do occur, the widespread adoption of CPR and the development of portable defibrillators — which only began to become common in the late 1960s — ensured that more people survived long enough to make it to the hospital. Once there, the development of specialized coronary care units, balloon angioplasty and artery-opening stents made it easier for doctors to rescue a patient suffering an acute cardiac event. Our changing heart health deaths Despite this progress in stopping heart attacks, around 700,000 Americans still die of all forms of heart disease every year, equivalent to 1 in 5 deaths overall. Some of this is the unintended result of our medical success. As more patients survive acute heart attacks and life expectancy has risen as a whole, it means more people are living long enough to become vulnerable to other, more chronic forms of heart disease, like heart failure and pulmonary-related heart conditions. While the decline in smoking has reduced a major risk factor for heart disease, Americans are in many other ways much less healthy than they were 50 years ago. The increasing prevalence of obesity, diabetes, hypertension, and sedentary behavior all raise the risk that more Americans will develop some form of potentially fatal heart disease down the line. Here, GLP-1 inhibitors like Ozempic hold amazing potential to reduce heart disease's toll. One study found that obese or overweight patients who took a GLP-1 inhibitor for more than three years had a 20 percent lower risk of heart attack, stroke, or death due to cardiovascular disease. Statins have saved millions of lives, yet tens of millions more Americans could likely benefit from taking the cholesterol-lowering drugs, especially women, minorities, and people in rural areas. Lastly, far more Americans could benefit from the kind of advanced screening I received. Only about 1.5 million Americans received a CAC test in 2017, but clinical guidelines indicate that more than 30 million people could benefit from such scans. Just as it is with cancer, getting ahead of heart disease is the best way to stay healthy. It's an astounding accomplishment to have reduced deaths from heart attacks by 90 percent over the past 50-plus years. But even better would be preventing more of us from ever getting to the cardiac brink at all. A version of this story originally appeared in the Good News newsletter. Sign up here!