Consumer health privacy

Consumer health data privacy policy

Care Path Compare publishes educational information about telehealth and healthcare programs. This separate policy describes the consumer health data categories that may be processed through optional measurement, the purposes for that processing, the entities involved, and the choices available to consumers.

Scope

This policy is intended to provide the disclosures associated with consumer health data laws, including Washington’s My Health My Data Act, when those laws apply. It supplements the generalprivacy policy and does not replace the privacy policies of clinics, pharmacies, affiliate networks, or other third-party sites.

Categories of consumer health data that may be collected

Care Path Compare does not ask visitors to create a health profile, submit medical records, or provide diagnosis, medication, prescription, insurance, or eligibility information. Optional analytics may process limited information that could be treated as consumer health data because the site discusses healthcare topics. That limited information may include:

Our custom analytics implementation does not send provider names, medication names, descriptive healthcare page paths, article titles, destination domains, affiliate-network names, or affiliate program identifiers to Google Analytics.

Sources of the data

The information described above may come from your browser or device, your interactions with the site, first-party local storage, and hosting infrastructure used to deliver and secure the site. A short-lived regional lookup may use Vercel request headers to determine whether Washington consent rules should be presented. Care Path Compare does not store the returned state value in Google Analytics.

Purposes of collection and use

When permitted or consented to, the information is used to:

Care Path Compare does not use this information to diagnose a condition, determine treatment eligibility, provide medical advice, create advertising audiences, or personalize healthcare recommendations.

Categories of consumer health data shared

After the required consent, sanitized analytics identifiers, session information, generic page categories, opaque affiliate tokens, and CTA placement may be shared with Google Analytics for measurement and reporting. Provider names, medication names, descriptive healthcare URLs, and destination domains are excluded from our custom analytics events.

Hosting and security providers may process request information needed to serve pages, determine the applicable privacy experience, prevent abuse, and protect the site. Care Path Compare does not sell consumer health data.

Third parties and specific affiliates involved

Selecting an affiliate link takes you to a separate provider, retailer, or affiliate-network site. That destination applies its own privacy policy. Care Path Compare’s analytics event is sent before navigation only when measurement is permitted and uses opaque tokens rather than descriptive healthcare paths or destination names. Under the current consent design, Care Path Compare does not append optional affiliate-network attribution sub-IDs for Washington visitors.

Consent for Washington visitors

Washington visitors are asked to make two separate choices before optional analytics begins: consent for Care Path Compare to collect the sanitized measurement information and separate consent to share that information with Google Analytics. Declining analytics does not limit access to the site or its content.

Your rights and choices

Depending on applicable law, you may have the right to:

Use Analytics preferences in the footer to withdraw future analytics consent. You may also clear this site’s cookies and local storage. A Global Privacy Control signal keeps optional analytics disabled.

Submitting an access or deletion request

Use the contact form and identify the request as a “consumer health data privacy request.” Do not include medical records, diagnosis details, medication information, or other sensitive health information in the message. Care Path Compare may need limited information to authenticate the request and determine whether responsive data can reasonably be located.

Retention

The local browser preference remains until you change it or clear browser storage. Google Analytics retention is controlled in the Care Path Compare property and should remain no longer than reasonably necessary for aggregate reporting. Hosting and security logs may be retained by service providers according to their operational and security practices.

Security

Care Path Compare limits the categories sent through custom analytics, keeps advertising storage and personalization disabled, uses HTTPS, and applies reasonable access and security controls. No internet transmission or storage system can be guaranteed completely secure.

Changes to this policy

This policy may be updated when measurement practices, service providers, legal requirements, or consumer rights change. Material new categories or purposes should be disclosed before or when they are introduced, with consent obtained where required.

This policy describes Care Path Compare’s current practices and does not state that every consumer health data law applies to every visitor or every activity.

Effective August 5, 2026Last updated August 8, 2026