GoodRx faced FTC enforcement for sharing user health data with advertising platforms including Facebook and Google, despite promising not to. As a discount service (not a pharmacy), GoodRx is not covered by HIPAA, leaving users with fewer protections than they might expect for health-related services.
| Data Type | Collected | Shared | Sold |
|---|---|---|---|
| Medication Searches | All searches | Analytics partners | Ad targeting |
| Health Conditions | Inferred from meds | Advertisers | Marketing data |
| Pharmacy Visits | Coupon usage | Pharmacy partners | Business data |
| Location Data | Pharmacy searches | Ad networks | Targeting data |
| Telehealth Data | GoodRx Care | Provider networks | Marketing eligible |
In 2023, the FTC required GoodRx to pay $1.5 million and stop sharing health data with advertisers after finding the company violated promises about health information privacy.
As a discount coupon service, GoodRx is not a "covered entity" under HIPAA. Your medication searches and health data don't receive standard healthcare privacy protections.
Health information was shared with Facebook, Google, and other ad platforms, enabling targeting based on medications and inferred health conditions.
Medication searches reveal health conditions. Searching for diabetes medications, antidepressants, or HIV treatments exposes sensitive health information.
Following FTC action, GoodRx implemented stricter data sharing controls and is prohibited from sharing health data with advertisers.