A telehealth startup that blew up in popularity during the pandemic has said it shared private patient data with tech giants Google, Meta, and TikTok for years.
As reported by TechCrunch(Opens in a new window), Cerebral, which is used by millions of people to search for therapy or mental health services, said it disclosed data collected from its online mental health self-assessment with third-party advertisers, as well as big tech.
The data was shared via tracking pixels, custom-built code that Meta, TikTok, and Google allow developers to embed in their apps and websites. As The Verge notes(Opens in a new window), Meta’s tracking pixel for instance can collect data about a user’s activity on a given app or website after an ad is clicked on the platform. Information is then tracked in real-time, including any forms filled in on said app or website.
In a notice(Opens in a new window) published on Cerebral’s website, the company admitted to employing these tracking pixels and sharing data with outside companies since October 2019, when the telehealth startup commenced operations. The company further stated that private information pertaining to over 3.1 million users was shared until it discovered the security lapse in January this year. Cerebral said it moved to remove, reconfigure and disable the tracking pixels on the platform in January.
This information included patient names, phone numbers, email addresses, date of birth, IP addresses, demographic, and insurance details. Google, Facebook, and TikTok were also able to track the different mental health services that patients used. The tech giants are not under any obligation to delete the data that was shared with them.
Cerebral also revealed that shared information
Read more on pcmag.com