Facebook Is Receiving Sensitive Medical Information from Hospital Websites

<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Facebook Is Receiving Sensitive Medical Information from Hospital Websites – The Markup</title> <meta name="description" content="Experts say some hospitals’ use of an ad tracking tool may violate a federal law protecting health information" /> <link rel="stylesheet" href="https://mrkp-static-production.themarkup.org/static/dist/main.39b6b4b6.css"> <link rel="shortcut icon" href="https://mrkp-static-production.themarkup.org/static/img/social-icons/favicon.png" /> <link rel="apple-touch-icon" href="https://mrkp-static-production.themarkup.org/static/img/social-icons/apple-touch-icon.png" /> <link rel="alternate" type="application/rss+xml" href="/feeds/rss.xml" /> <link rel="canonical" href="https://themarkup.org/pixel-hunt/2022/06/16/facebook-is-receiving-sensitive-medical-information-from-hospital-websites" /> <meta property="og:type" content="article" /> <meta property="og:title" content="Facebook Is Receiving Sensitive Medical Information from Hospital Websites – The Markup" /> <meta property="og:description" content="Experts say some hospitals’ use of an ad tracking tool may violate a federal law protecting health information" /> <meta property="og:image" content="https://mrkp-static-production.themarkup.org/uploads/2022/06/PixelHospital_Final-1200x628.jpg" /> <meta name="twitter:card" content="summary_large_image"/> <meta name="twitter:site" content="@themarkup"> <meta name="twitter:creator" content="@themarkup"/> <meta name="twitter:title" content="Facebook Is Receiving Sensitive Medical Information from Hospital Websites – The Markup"/> <meta name="twitter:image" content="https://mrkp-static-production.themarkup.org/uploads/2022/06/PixelHospital_Final-1200x600.jpg"/> <meta name="twitter:description" content="Experts say some hospitals’ use of an ad tracking tool may violate a federal law protecting health information"/> <meta property="article:section" content="Pixel Hunt"> <script type="text/javascript"> var STRIPE_PUBLISHABLE_KEY = "pk_live_N1jzERrJAAx1c1H4ab6yG8T600Ku2TXda4"; var SCRIPT_ROOT = ""; var split_tests = {"css": "", "endpoint_url": "/_split-tests", "nonce": "9b55e5548f", "onload": null, "tests": []}; </script></head> <body> <div class="wrapper " id="top"> <section id="menu" class="site-menu js-site-menu" aria-hidden="true"> <div class="site-menu-inner"> <nav class="menu-list menu-list--content" aria-label="Series"> <h3 class="investigation-header">Investigations and Tools</h3> <ul class='menu-nav'> <li class="menu-nav__item"> <a href="/series/amazons-advantage" class="menu-nav__link site-header-link">Amazon’s Advantage</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/series/organ-failure" class="menu-nav__link site-header-link">Organ Failure</a> </li> <li class="menu-nav__item"> <a href="/series/blacklight" class="menu-nav__link site-header-link">Blacklight</a> </li> <li class="menu-nav__item"> <a href="/series/pixel-hunt/" class="menu-nav__link site-header-link">Pixel Hunt</a> </li> <li class="menu-nav__item"> <a href="/series/citizen-browser" class="menu-nav__link site-header-link">Citizen Browser</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/series/privacy" class="menu-nav__link site-header-link">Privacy</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/series/languages-of-misinformation" class="menu-nav__link site-header-link">Languages of Misinformation</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/series/still-loading" class="menu-nav__link site-header-link">Still Loading</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/series/machine-learning" class="menu-nav__link site-header-link">Machine Learning</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/series/working-for-an-algorithm" class="menu-nav__link site-header-link">Working for an Algorithm</a> </li> </ul> <form id="search-form" class="site-search site-search--navy js-site-search search-is-empty" action="/search" role="search"> <label for="search" class="visually-hidden" aria-hidden="true">Search term</label> <div class='site-search__input-wrapper'> <input name="s" type="search" id="search" class="site-search__input js-search-input" placeholder="Search" aria-label="Search input"> </div> <div class='button button--navy'> <button class="site-search__submit button__label" type="submit" aria-controls="search" aria-label="Submit"> <svg><use xlink:href="#icon-search"></use></svg> </button> </div> </form> </nav> <nav class="menu-list menu-list--information" aria-label="Pages"> <ul class="menu-nav"> <li class="menu-nav__item"> <a href="/about" class="menu-nav__link site-header-link">About Us</a> </li> <li class="menu-nav__item"> <a href="/donate/" class="menu-nav__link site-header-link">Donate</a> </li> <li class="menu-nav__item"> <a href="/awards" class="menu-nav__link site-header-link">Awards</a> </li> <li class="menu-nav__item"> <a href="/tips" class="menu-nav__link site-header-link">Have a Tip?</a> </li> <li class="menu-nav__item"> <a href="/team/" class="menu-nav__link site-header-link">Team</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/series/show-your-work" class="menu-nav__link site-header-link">Show Your Work</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/jobs" class="menu-nav__link site-header-link">Jobs</a> </li> <li class="menu-nav__item"> <a href="/newsletter" class="menu-nav__link site-header-link">Newsletters</a> </li> <li class="menu-nav__item"> <a href="/events" class="menu-nav__link site-header-link">Events</a> </li> </ul> </nav> <nav class="menu-list menu-list--follow" aria-label="Social media"> <ul class='menu-nav'> <li class="menu-nav__item"> <a href="https://www.facebook.com/teammarkup/" class="menu-nav__link site-header-link menu-nav__link--facebook"> <svg><use xlink:href="#icon-facebook"></use></svg> Facebook</a> </li> <li class="menu-nav__item"> <a href="https://twitter.com/themarkup" class="menu-nav__link site-header-link menu-nav__link--twitter"> <svg><use xlink:href="#icon-twitter"></use></svg> Twitter</a> </li> <li class="menu-nav__item"> <a href="https://www.instagram.com/the.markup/" class="menu-nav__link site-header-link menu-nav__link--instagram"> <svg><use xlink:href="#icon-instagram"></use></svg> Instagram</a> </li> <li class="menu-nav__item"> <a href="https://mastodon.themarkup.org/@themarkup" class="menu-nav__link site-header-link menu-nav__link--mastodon" rel="me"> <svg><use xlink:href="#icon-mastodon"></use></svg> Mastodon</a> </li> <li class="menu-nav__item"> <a href="https://themarkup.org/feeds/rss.xml" class="menu-nav__link site-header-link menu-nav__link--rss-feed"> <svg><use xlink:href="#icon-rss-feed"></use></svg> RSS Feed</a> </li> </ul> </nav> </div> </section> <svg width="0" height="0" display="block" visibility="hidden" xmlns="http://www.w3.org/2000/svg"> <defs> <style> .cls-1 { fill: #fff; } .cls-2 { fill: #ef3961; } .cls-3 { mix-blend-mode: multiply; } .cls-4 { isolation: isolate; } </style> <linearGradient id="arrow-linear-gradient" x1="0" y1="49.5" x2="388.5" y2="49.5" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fbd7de"/><stop offset="0.8" stop-color="#ff335f"/></linearGradient> <symbol id="icon-facebook" viewBox="0 0 16 32"> <path d="M9.959 32H3.318V15.998H0v-5.514h3.318v-3.31C3.318 2.676 5.191 0 10.515 0h4.431v5.516h-2.77c-2.073 0-2.21.771-2.21 2.209l-.009 2.76h5.019l-.587 5.514H9.958v16.002h.001z" /> </symbol> <symbol id="icon-twitter" viewBox="0 0 36 32"> <path d="M35.005.564a14.425 14.425 0 01-4.691 1.867C28.97.934 27.049.001 24.924.001c-4.078 0-7.383 3.445-7.383 7.694 0 .603.061 1.191.188 1.752-6.136-.321-11.577-3.381-15.222-8.04a7.921 7.921 0 00-.999 3.87c0 2.668 1.304 5.024 3.286 6.406a7.193 7.193 0 01-3.347-.962v.095c0 3.729 2.544 6.84 5.927 7.545a6.935 6.935 0 01-1.948.271c-.475 0-.94-.046-1.388-.137.938 3.056 3.666 5.284 6.899 5.343-2.529 2.065-5.714 3.293-9.173 3.293-.596 0-1.185-.033-1.762-.106 3.269 2.182 7.151 3.456 11.322 3.456 13.587 0 21.012-11.725 21.012-21.894 0-.335-.004-.667-.019-.995a15.312 15.312 0 003.685-3.985 14.29 14.29 0 01-4.241 1.211A7.65 7.65 0 0035.007.563z" /> </symbol> <symbol id="icon-instagram" viewBox="0 0 16 16"> <path d="M8 0c2.173 0 2.445.01 3.298.048.852.039 1.433.174 1.942.372a3.92 3.92 0 011.417.923c.445.444.719.89.923 1.417.198.509.333 1.09.372 1.942C15.99 5.555 16 5.827 16 8s-.01 2.445-.048 3.298c-.039.852-.174 1.433-.372 1.942a3.921 3.921 0 01-.923 1.417c-.444.445-.89.719-1.417.923-.509.198-1.09.333-1.942.372C10.445 15.99 10.173 16 8 16s-2.445-.01-3.298-.048c-.852-.039-1.433-.174-1.942-.372a3.922 3.922 0 01-1.417-.923A3.921 3.921 0 01.42 13.24c-.198-.509-.333-1.09-.372-1.942C.01 10.445 0 10.173 0 8s.01-2.445.048-3.298C.087 3.85.222 3.269.42 2.76c.204-.526.478-.973.923-1.417.444-.445.89-.719 1.417-.923C3.269.222 3.85.087 4.702.048 5.555.01 5.827 0 8 0zm0 1.441c-2.136 0-2.39.009-3.233.047-.78.036-1.203.166-1.485.276-.374.145-.64.318-.92.598-.28.28-.453.546-.598.92-.11.282-.24.705-.276 1.485-.038.844-.047 1.097-.047 3.233s.009 2.39.047 3.233c.036.78.166 1.203.276 1.485.145.374.318.64.598.92.28.28.546.453.92.598.282.11.705.24 1.485.276.844.038 1.097.047 3.233.047s2.39-.009 3.233-.047c.78-.036 1.203-.166 1.485-.276.374-.145.64-.318.92-.598.28-.28.453-.546.598-.92.11-.282.24-.705.276-1.485.038-.844.047-1.097.047-3.233s-.009-2.39-.047-3.233c-.036-.78-.166-1.203-.276-1.485a2.48 2.48 0 00-.598-.92 2.479 2.479 0 00-.92-.598c-.282-.11-.705-.24-1.485-.276-.844-.038-1.097-.047-3.233-.047zm0 9.226a2.667 2.667 0 100-5.334 2.667 2.667 0 000 5.334zm0-6.775a4.108 4.108 0 110 8.216 4.108 4.108 0 010-8.216zm5.23-.162a.96.96 0 11-1.92 0 .96.96 0 011.92 0z" /> </symbol> <symbol id="icon-mastodon" viewBox="0 0 16 16"> <path d="M11.19 12.195c2.016-.24 3.77-1.475 3.99-2.603.348-1.778.32-4.339.32-4.339 0-3.47-2.286-4.488-2.286-4.488C12.062.238 10.083.017 8.027 0h-.05C5.92.017 3.942.238 2.79.765c0 0-2.285 1.017-2.285 4.488l-.002.662c-.004.64-.007 1.35.011 2.091.083 3.394.626 6.74 3.78 7.57 1.454.383 2.703.463 3.709.408 1.823-.1 2.847-.647 2.847-.647l-.06-1.317s-1.303.41-2.767.36c-1.45-.05-2.98-.156-3.215-1.928a3.614 3.614 0 0 1-.033-.496s1.424.346 3.228.428c1.103.05 2.137-.064 3.188-.189zm1.613-2.47H11.13v-4.08c0-.859-.364-1.295-1.091-1.295-.804 0-1.207.517-1.207 1.541v2.233H7.168V5.89c0-1.024-.403-1.541-1.207-1.541-.727 0-1.091.436-1.091 1.296v4.079H3.197V5.522c0-.859.22-1.541.66-2.046.456-.505 1.052-.764 1.793-.764.856 0 1.504.328 1.933.983L8 4.39l.417-.695c.429-.655 1.077-.983 1.934-.983.74 0 1.336.259 1.791.764.442.505.661 1.187.661 2.046v4.203z" /> </symbol> <symbol id="icon-chevron" viewBox="0 0 14 8"> <path d="M14 1.3L12.6 0 7 5.3 1.4 0 0 1.3l5.6 5.4L7 8l1.4-1.3z" /> </symbol> <symbol id="icon-left-arrow" viewBox="0 0 36.6 16"> <path d="M36.6 8L22.7 0v6.4H0v3.2h22.7V16z" /> </symbol> <symbol id="icon-right-arrow" viewBox="0 0 36.6 16"> <path d="M0 8l13.9 8V9.6h22.7V6.4H13.9V0z" /> </symbol> <symbol id="icon-menu" viewBox="0 0 25 19"> <path d="M11 0h14v3H11V0zM0 8h25v3H0V8zm5 8h20v3H5v-3z" /> </symbol> <symbol id="icon-search" viewBox="0 0 21 21"> <path d="M21 18.94l-5.473-5.43a8.426 8.426 0 001.638-4.996C17.165 3.819 13.315 0 8.582 0 3.85 0 0 3.82 0 8.514c0 4.695 3.85 8.514 8.582 8.514 1.794 0 3.46-.55 4.84-1.486L18.924 21 21 18.94zM2.517 8.514c0-3.318 2.721-6.018 6.066-6.018 3.345 0 6.066 2.7 6.066 6.018 0 3.318-2.721 6.017-6.066 6.017-3.346 0-6.066-2.7-6.066-6.017z" /> </symbol> <symbol id="markup-logo" viewBox="0 0 538.7 98"> <path d="M150.4 72.2c-9.2 0-15.3-7.8-15.3-24.2v-2.8H167v-.5c0-16.6-8.6-25.2-22.2-25.2-12.8 0-26.2 12.1-26.2 31 0 19.7 10.8 30 25.5 30 11 0 20.5-8 24.9-17.3l-1.5-.9c-4.4 5.6-11.3 9.9-17.1 9.9zm-5.9-49.4c4 0 7 2.3 7 13.3v5.5h-16.2c.9-12.9 4.5-18.8 9.2-18.8zm-26.9 54.6l2 .6v1.5h-29V78l2-.6c3.3-1 4-2.7 4-8.3V36.9c0-7.1-2.7-10.1-8.1-10.1-2.5 0-5 .7-7.2 2.2v40.1c0 5.6.7 7.3 4 8.3l2 .6v1.5h-29V78l2-.6c4.2-1.3 5-2.7 5-8.3V13.9c0-5.5-1.6-7-6.9-7H45.8v62.2c0 5.6.8 7 5 8.3l2 .6v1.5h-31V78l2-.6c4.2-1.3 5-2.7 5-8.3V6.9h-3.7C13 6.9 9.7 10 3.4 23.9l-1.9 4.2H0L1 3.5h61.3l19-3.5v25.4c3.7-3.6 9.2-5.9 15.2-5.9 9.9 0 16.1 7 16.1 20v29.6c0 5.6.8 7 5 8.3zM459.8 81l-.4-6.8c-3.7 3.8-9.4 6.3-15.6 6.3-9.9 0-16.1-7-16.1-20V32.9c0-6.5-2.4-9.2-6.6-9.2-2.2 0-4.4.8-8.8 5.4l-9.5 10 16.5 28.8c3.8 6.6 5.6 8.2 8.5 9.1v1.5c-3 1.1-8.5 2-11.9 2-6.9 0-10.5-2.6-15.3-12.3l-8.8-17.8-4.2 4.3v14.4c0 5.6.8 7 5 8.3l2 .6v1.5h-30V78l2-.6c4.2-1.3 5-2.7 5-8.3V13.9c0-5.6-.8-7-4.4-8.1l-2.6-.8V3.5l23-3.5v50.5L401.3 36c3.7-4 3.6-9.6-2.1-12.4l-3.3-1.6v-1.5h31.8l16-1.5v44.1c0 7.1 2.7 10.1 8.1 10.1 2.5 0 5-.7 7.2-2.2V32.9c0-5.6-.8-7-4.4-8.1L452 24v-1.5l23-3.5v48.1c0 5.6.8 7 4.4 8.1l2.6.8v1.5L459.8 81zm-187.6-3.8l1.9.8v1.5h-32V78l1.9-.8c4.3-1.8 5.3-3.1 4.9-10L246 14.8l-23.9 64.9h-1.8l-23.4-64.3-2.6 45.3c-.4 7.4 1.2 10.7 7.9 15.4l2.7 1.9v1.5h-24V78l1.9-1.8c6.1-5.7 7.5-8.3 7.9-15.7l2.7-45.6c.3-5-.8-6.8-5.5-8.9l-2.3-1V3.5h25.5l17.4 47.9 17.6-47.9h25.1V5l-2.3 1c-4.7 2.1-5.8 3.9-5.5 8.9l3 51.1c.4 7.6 1.3 9.3 5.8 11.2zM349.6 31c4.2 0 7.7 3.4 11.2 3.4 4.2 0 6.5-3.5 6.5-10.2 0-2.6-.7-3.7-2.4-4.2-.6-.2-2.2-.5-3.4-.5-4.7 0-10.1 4.3-13.6 9.3l-.5-9.8-22.2 3.5V24l2.6.8c3.6 1.1 4.4 2.5 4.4 8.1v36.2c0 5.2-1.7 7.4-6.2 7.4-4.4 0-6.2-2.2-6.2-7.4V40.5c0-14.7-7.8-21-21.7-21-9.6 0-17.1 5.4-21.1 13.1-.5.9-.6 2.2.5 3.2 2.6 2.3 5.8 3.7 8 3.7 3.9 0 6.5-2.3 7.7-8.8 1.2-6.6 2.4-8 4.9-8 3.7 0 5.7 2.2 5.7 9.7V48c-3.1-1.1-6.5-1.8-9.6-1.8-11.9 0-20.5 7.3-20.5 17.4 0 9.8 7.9 16.9 17.3 16.9 6 0 11.3-2.6 14.6-6.7 2.1 4.3 6.2 5.7 13.2 5.7h37.9V78l-2.2-.6c-5.7-1.6-6.3-2.7-6.3-8.3v-38c.5-.1 1-.1 1.4-.1zm-51.2 42.7c-5.2 0-8.6-3.8-8.6-11.8s3.4-11.8 8.6-11.8c1.7 0 3.5.3 5.4 1v11.6c0 3.5.3 6.3.9 8.6-2.1 1.6-4.3 2.4-6.3 2.4zm218.2-54.2c-5 0-10 2.3-13.6 5.9l-.3-6.4-22.2 3.5V24l2.6.8c3.6 1.1 4.4 2.5 4.4 8.1v54.7c0 5.6-.8 7-5 8.3l-2 .6V98h30v-1.5l-2-.6c-4.2-1.3-5-2.7-5-8.3v-8.3c2.4.8 5 1.2 7.7 1.2 13.8 0 27.5-11.7 27.5-31 0-18.7-10.3-30-22.1-30zM511 77c-2.6 0-5.2-1.2-7.5-3.6V28.7c2.3-2.4 5-3.7 7.5-3.7 6.6 0 11 6.6 11 26s-4.4 26-11 26z" /> </symbol> <symbol id="icon-cross" viewBox="0 0 100 100"> <path d="M9.341 80.052l70.71-70.71 10.607 10.606-70.71 70.71z" /> <path d="M9.341 19.948L19.948 9.342l70.71 70.71L80.05 90.658z" /> </symbol> <symbol id="icon-rss-feed" viewBox="0 0 192 192"> <circle cx="32" cy="160" r="32" /> <path d="M0 96c53 0 96 43 96 96h32C128 121.3 70.7 64 0 64v32z" /> <path d="M0 32c88.4 0 160 71.6 160 160h32C192 86 106 0 0 0v32z" /> </symbol> <symbol id="icon-as-seen-in"> <g class="cls-1"> <g class="cls-3"><path class="cls-2" d="m2.09,10.46s2.95,6,8.6,6c5.65,0,8.6-6,8.6-6,0,0-2.95-6-8.6-6-5.65,0-8.6,6-8.6,6Z"/><path class="cls-2" d="m10.69,16.92c-2.44,0-4.77-1.09-6.75-3.14-1.48-1.53-2.23-3.05-2.26-3.11-.06-.13-.06-.28,0-.4.03-.06.79-1.58,2.26-3.11,1.98-2.05,4.31-3.14,6.75-3.14s4.77,1.09,6.75,3.14c1.48,1.53,2.23,3.05,2.26,3.11.06.13.06.28,0,.4-.03.06-.79,1.58-2.26,3.11-1.98,2.05-4.31,3.14-6.75,3.14ZM2.61,10.46c.57,1.02,3.36,5.54,8.08,5.54s7.51-4.52,8.08-5.54c-.57-1.02-3.36-5.54-8.08-5.54S3.18,9.44,2.61,10.46Z"/></g> <g><path class="cls-1" d="m.71,9.54s2.95,6,8.6,6c5.65,0,8.6-6,8.6-6,0,0-2.95-6-8.6-6C3.66,3.55.71,9.54.71,9.54Z"/><path class="cls-2" d="m9.31,16c-2.44,0-4.77-1.09-6.75-3.14-1.48-1.53-2.23-3.05-2.26-3.11-.06-.13-.06-.28,0-.4.03-.06.79-1.58,2.26-3.11,1.98-2.05,4.31-3.14,6.75-3.14s4.77,1.09,6.75,3.14c1.48,1.53,2.23,3.05,2.26,3.11.06.13.06.28,0,.4-.03.06-.79,1.58-2.26,3.11-1.98,2.05-4.31,3.14-6.75,3.14ZM1.23,9.54c.57,1.02,3.36,5.54,8.08,5.54s7.51-4.52,8.08-5.54c-.57-1.02-3.36-5.54-8.08-5.54S1.8,8.52,1.23,9.54Z"/></g> </g><circle class="cls-2" cx="9.31" cy="9.54" r="4"/><rect class="cls-1" x="9.38" y="7.49" width="2.05" height="2.05"/></symbol> <symbol id="icon-resource"> <g><path class="cls-2" d="m17.35,16.2l-3.84-6.94V3.79h1.44c.78,0,1.41-.63,1.41-1.41s-.63-1.41-1.41-1.41h-7.65c-.78,0-1.41.63-1.41,1.41s.63,1.41,1.41,1.41h1.44v5.47l-3.84,6.94c-.76,1.37.23,3.04,1.79,3.04h8.86c1.56,0,2.55-1.67,1.79-3.04Z"/><path class="cls-2" d="m15.56,19.76H6.7c-.92,0-1.74-.47-2.21-1.26-.47-.79-.48-1.74-.04-2.54l3.77-6.82v-4.82h-.92c-1.06,0-1.93-.86-1.93-1.93s.86-1.93,1.93-1.93h7.65c1.06,0,1.93.86,1.93,1.93s-.86,1.93-1.93,1.93h-.92v4.82l3.77,6.82c.44.8.43,1.75-.04,2.54-.47.79-1.29,1.26-2.21,1.26ZM7.3,1.48c-.49,0-.9.4-.9.9s.4.9.9.9h1.95v6.12l-3.9,7.06c-.27.48-.26,1.05.02,1.52s.77.75,1.32.75h8.86c.55,0,1.04-.28,1.32-.75s.29-1.04.02-1.52l-3.9-7.06V3.28h1.95c.49,0,.9-.4.9-.9s-.4-.9-.9-.9h-7.65Z"/></g> <g><path class="cls-1" d="m15.8,16.2l-3.84-6.94V3.5c0-.76-.61-1.37-1.37-1.37h-2.04c-.76,0-1.37.61-1.37,1.37v5.76l-3.84,6.94c-.76,1.37.23,3.04,1.79,3.04h8.86c1.56,0,2.55-1.67,1.79-3.04Z"/><path class="cls-2" d="m14.01,19.76H5.15c-.92,0-1.74-.47-2.21-1.26-.47-.79-.48-1.74-.04-2.54l3.77-6.82V3.5c0-1.04.84-1.88,1.88-1.88h2.04c1.04,0,1.88.84,1.88,1.88v5.62l3.77,6.82h0c.44.8.43,1.75-.04,2.54-.47.79-1.29,1.26-2.21,1.26ZM8.56,2.65c-.47,0-.85.38-.85.85v5.76c0,.09-.02.17-.06.25l-3.84,6.94c-.27.48-.26,1.05.02,1.52s.77.75,1.32.75h8.86c.55,0,1.04-.28,1.32-.75s.29-1.04.02-1.52l-3.84-6.94c-.04-.08-.06-.16-.06-.25V3.5c0-.47-.38-.85-.85-.85h-2.04Z"/></g> <g><rect class="cls-1" x="4.34" y=".97" width="10.48" height="2.83" rx="1.41" ry="1.41"/><path class="cls-2" d="m13.41,4.31h-7.65c-1.06,0-1.93-.86-1.93-1.93s.86-1.93,1.93-1.93h7.65c1.06,0,1.93.86,1.93,1.93s-.86,1.93-1.93,1.93ZM5.75,1.48c-.49,0-.9.4-.9.9s.4.9.9.9h7.65c.49,0,.9-.4.9-.9s-.4-.9-.9-.9h-7.65Z"/></g><path class="cls-2" d="m10.74,12h-2.33l-1.87,3.38c-.37.67.11,1.48.87,1.48h4.32c.76,0,1.24-.82.87-1.48l-1.87-3.38Z"/> </symbol> <symbol id="icon-impact"> <g><path class="cls-2" d="m19.23,8.23v5.07s0,5.07,0,5.07c-5.78,0-6.42-1.29-6.47-5.07.06-3.78.69-5.07,6.47-5.07Z"/><path class="cls-2" d="m19.23,18.61c-6.03,0-6.65-1.54-6.71-5.3.06-3.78.68-5.31,6.71-5.31.13,0,.23.1.23.23v10.15c0,.13-.1.23-.23.23Zm-.23-10.15c-5.47.03-5.95,1.23-6.01,4.84.05,3.6.54,4.8,6.01,4.84v-9.68Z"/></g> <g><path class="cls-2" d="m14.77,12.23c.01-.57-.02-1.16-.23-1.69-.1-.26-.24-.49-.39-.73-.02-.03-.03-.05-.05-.08-.21-.35-.43-.7-.69-1.01-.81-.94-1.9-1.2-3.07-1.37-.91-.13-1.86-.56-2.42-1.31-.56-.75-.82-1.46-.9-2.4-.05-.65.03-1.61-.34-2.17-.28-.43-.98-.75-1.42-.53-.51.26-.6.82-.63,1.34-.12,2.05.02,4.25,1.22,5.9h-2.88c-.63,0-1.13.51-1.13,1.13s.51,1.13,1.13,1.13c-.63,0-1.13.51-1.13,1.13s.51,1.13,1.13,1.13c-.63,0-1.13.51-1.13,1.13s.51,1.13,1.13,1.13h.58c-.63,0-1.13.51-1.13,1.13s.51,1.13,1.13,1.13h2.43c1.3.74,2.33.92,3.67,1.08,1.44.18,3.21-.39,4.17-1.08,1.81-1.3.91-3.11.96-5.03Z"/><path class="cls-2" d="m10.19,18.61c-.2,0-.39-.01-.58-.03-1.33-.16-2.38-.34-3.7-1.08h-2.37c-.75,0-1.37-.61-1.37-1.37,0-.37.15-.71.39-.96-.56-.17-.97-.69-.97-1.31,0-.47.24-.89.6-1.13-.36-.25-.6-.66-.6-1.13s.24-.89.6-1.13c-.36-.25-.6-.66-.6-1.13,0-.75.61-1.37,1.37-1.37h2.44c-1.09-1.8-1.11-4.08-1.02-5.68.02-.39.07-1.19.75-1.54.56-.28,1.39.09,1.72.61.32.49.34,1.18.35,1.79,0,.18,0,.35.02.5.07.91.32,1.57.85,2.28.48.64,1.3,1.08,2.27,1.22,1.09.16,2.32.41,3.22,1.45.28.32.5.69.72,1.04l.05.08c.14.23.29.49.4.76.25.62.26,1.28.25,1.78h0c-.01.5.04,1,.09,1.48.14,1.33.29,2.71-1.15,3.74-.84.6-2.36,1.16-3.76,1.16Zm-7.22-5.65c-.5,0-.9.4-.9.9s.4.9.9.9h.58c.13,0,.23.1.23.23s-.1.23-.23.23c-.5,0-.9.4-.9.9s.4.9.9.9h2.43s.08.01.12.03c1.27.73,2.28.89,3.58,1.05,1.42.17,3.13-.41,4.01-1.04,1.22-.88,1.1-2,.96-3.31-.05-.5-.11-1.01-.1-1.54h0c.02-.68-.05-1.18-.22-1.6-.1-.24-.23-.47-.37-.69l-.05-.08c-.2-.33-.42-.68-.67-.97-.71-.83-1.65-1.11-2.93-1.29-1.08-.16-2.02-.67-2.57-1.4-.58-.78-.86-1.53-.94-2.52-.01-.16-.02-.34-.02-.52-.01-.55-.03-1.17-.28-1.54-.22-.33-.8-.61-1.12-.45-.37.19-.47.59-.5,1.15-.09,1.65-.08,4.03,1.17,5.75.05.07.06.17.02.24-.04.08-.12.13-.21.13h-2.88c-.5,0-.9.4-.9.9s.4.9.9.9c.13,0,.23.1.23.23s-.1.23-.23.23c-.5,0-.9.4-.9.9s.4.9.9.9c.13,0,.23.1.23.23s-.1.23-.23.23Zm11.8-.73h0,0Z"/></g> <g><path class="cls-1" d="m13.3,9.81s-.03-.05-.05-.08c-.21-.35-.43-.7-.69-1.01-.81-.94-1.9-1.2-3.07-1.37-.91-.13-1.86-.56-2.42-1.31-.56-.75-.82-1.46-.9-2.4-.05-.65.03-1.61-.34-2.17-.28-.43-.98-.75-1.42-.53-.51.26-.6.82-.63,1.34-.12,2.09-.31,4.08.96,5.74-.74.12-1.9.23-1.9.23-.75-.03,2.01,8.85,2.29,9.01,1.3.74,2.33.92,3.67,1.08,1.44.18,3.21-.39,4.17-1.08,1.81-1.3.91-3.11.96-5.03.01-.57-.02-1.16-.23-1.69-.1-.26-.24-.49-.39-.73Z"/><path class="cls-2" d="m9.35,18.84c-.21,0-.42-.01-.62-.04-1.38-.17-2.46-.35-3.84-1.14-.12-.07-.41-.24-1.62-4.4-1.22-4.23-1.05-4.83-.99-5.03.09-.32.33-.44.53-.45.09,0,.61-.06,1.14-.12-.86-1.57-.75-3.36-.65-5.09l.02-.32c.02-.4.08-1.33.88-1.73.68-.34,1.63.08,2.03.69.35.54.37,1.27.39,1.91,0,.17,0,.34.02.48.07.86.3,1.48.81,2.15.44.59,1.21,1,2.11,1.13,1.13.16,2.41.42,3.36,1.53.29.34.52.71.74,1.07l.05.08s0,0,0,0c.15.24.3.51.42.8.26.66.28,1.35.27,1.88-.01.48.04.97.09,1.44.15,1.4.31,2.84-1.24,3.96-.89.64-2.43,1.2-3.88,1.2Zm-3.9-1.93c1.19.66,2.12.81,3.39.97,1.31.16,2.99-.38,3.84-1,1.11-.8,1-1.76.86-3.1-.05-.5-.11-1.02-.1-1.57.02-.65-.05-1.11-.2-1.51-.09-.22-.22-.45-.35-.66l-.05-.08c-.2-.33-.41-.66-.65-.94-.67-.77-1.56-1.04-2.78-1.21-1.15-.16-2.14-.71-2.73-1.49-.61-.81-.91-1.6-.99-2.64-.01-.16-.02-.34-.02-.53-.01-.52-.03-1.1-.24-1.42-.18-.28-.65-.46-.82-.37-.24.12-.34.38-.37.95l-.02.32c-.11,1.89-.22,3.67.88,5.11.1.13.12.3.06.46-.06.15-.2.26-.36.29-.52.09-1.24.16-1.64.2.03.47.25,1.69.95,4.13.59,2.05,1.15,3.69,1.33,4.09Z"/></g> <g><rect class="cls-1" x=".98" y="8.19" width="6.45" height="2.27" rx="1.13" ry="1.13"/><path class="cls-2" d="m6.42,10.92H1.99c-.81,0-1.48-.66-1.48-1.48v-.25c0-.81.66-1.48,1.48-1.48h4.43c.81,0,1.48.66,1.48,1.48v.25c0,.81-.66,1.48-1.48,1.48Zm-4.43-2.27c-.3,0-.54.24-.54.54v.25c0,.3.24.54.54.54h4.43c.3,0,.54-.24.54-.54v-.25c0-.3-.24-.54-.54-.54H1.99Z"/></g> <g><rect class="cls-1" x=".98" y="10.46" width="6.45" height="2.27" rx="1.13" ry="1.13"/><path class="cls-2" d="m6.42,13.19H1.99c-.81,0-1.48-.66-1.48-1.48v-.25c0-.81.66-1.48,1.48-1.48h4.43c.81,0,1.48.66,1.48,1.48v.25c0,.81-.66,1.48-1.48,1.48Zm-4.43-2.27c-.3,0-.54.24-.54.54v.25c0,.3.24.54.54.54h4.43c.3,0,.54-.24.54-.54v-.25c0-.3-.24-.54-.54-.54H1.99Z"/></g> <g><rect class="cls-1" x=".98" y="12.72" width="6.45" height="2.27" rx="1.13" ry="1.13"/><path class="cls-2" d="m6.42,15.46H1.99c-.81,0-1.48-.66-1.48-1.48v-.25c0-.81.66-1.48,1.48-1.48h4.43c.81,0,1.48.66,1.48,1.48v.25c0,.81-.66,1.48-1.48,1.48Zm-4.43-2.27c-.3,0-.54.24-.54.54v.25c0,.3.24.54.54.54h4.43c.3,0,.54-.24.54-.54v-.25c0-.3-.24-.54-.54-.54H1.99Z"/></g> <g><rect class="cls-1" x="1.56" y="14.99" width="5.3" height="2.27" rx="1.13" ry="1.13"/><path class="cls-2" d="m5.84,17.73h-3.28c-.81,0-1.48-.66-1.48-1.48v-.25c0-.81.66-1.48,1.48-1.48h3.28c.81,0,1.48.66,1.48,1.48v.25c0,.81-.66,1.48-1.48,1.48Zm-3.28-2.27c-.3,0-.54.24-.54.54v.25c0,.3.24.54.54.54h3.28c.3,0,.54-.24.54-.54v-.25c0-.3-.24-.54-.54-.54h-3.28Z"/></g> <g><path class="cls-1" d="m7.37,9.62s-.32,2.43,2.06,3.4"/><path class="cls-2" d="m9.44,13.49c-.06,0-.12-.01-.18-.03-2.15-.88-2.48-2.93-2.35-3.89.03-.26.27-.44.53-.4.26.03.44.27.4.52-.01.09-.23,2.09,1.78,2.9.24.1.35.37.26.61-.07.18-.25.29-.43.29Z"/></g> </symbol> <symbol id="icon-investigation"> <path class="cls-2" d="m19.03,15.76l-4.89-4.89c1.59-2.42,1.32-5.7-.8-7.83C10.9.61,6.95.61,4.52,3.04s-2.43,6.38,0,8.81c2.13,2.13,5.41,2.39,7.83.8l4.89,4.89c.49.49,1.29.49,1.79,0,.49-.49.49-1.29,0-1.79Z"/> <g><path class="cls-1" d="m17.36,16.19l-4.89-4.89c1.59-2.42,1.32-5.7-.8-7.83-2.43-2.43-6.38-2.43-8.81,0s-2.43,6.38,0,8.81c2.13,2.13,5.41,2.39,7.83.8l4.89,4.89c.49.49,1.29.49,1.79,0,.49-.49.49-1.29,0-1.79Z"/><path class="cls-2" d="m16.47,18.78c-.45,0-.88-.18-1.2-.5l-4.65-4.65c-2.59,1.51-5.93,1.1-8.07-1.05C-.05,9.99-.05,5.77,2.55,3.17c2.6-2.6,6.82-2.6,9.42,0,2.14,2.14,2.56,5.48,1.04,8.07l4.65,4.65c.66.66.66,1.74,0,2.4-.32.32-.75.5-1.2.5Zm-5.73-6.25l5.14,5.14c.31.31.86.31,1.18,0,.32-.32.32-.85,0-1.18l-5.14-5.14.19-.29c1.5-2.28,1.19-5.35-.75-7.28-1.1-1.1-2.55-1.7-4.1-1.7s-3.01.6-4.1,1.7c-1.1,1.1-1.7,2.55-1.7,4.1s.6,3.01,1.7,4.1c1.94,1.94,5,2.25,7.28.75l.29-.19Z"/></g><circle class="cls-2" cx="7.2" cy="8.02" r="3.77"/> </symbol> <symbol id="icon-check-our-work"> <g><path class="cls-2" d="m9.51,18.26c-.42,0-.82-.23-1.12-.64L2.44,9.33c-.25-.35-.07-.94.28-.94l3.39.06c.1,0,.2.06.27.16l2.61,3.64c.17.24.45.21.6-.06L15.02,1.97c.07-.14.19-.22.32-.22h3.41c.33-.01.51.52.31.88l-8.28,14.74c-.27.51-.69.84-1.15.89-.04,0-.08,0-.12,0Z"/><path class="cls-2" d="m9.51,18.77c-.58,0-1.14-.31-1.53-.86L2.03,9.63c-.25-.35-.28-.86-.08-1.25.17-.32.46-.5.78-.5l3.39.06c.26,0,.51.14.68.37l2.46,3.42L14.57,1.73c.16-.31.45-.49.77-.5h3.41c.3-.02.58.16.75.44.21.36.22.83.01,1.2l-8.28,14.74c-.35.66-.91,1.08-1.54,1.14-.06,0-.12,0-.17,0ZM2.84,8.91s0,.1.02.13l5.95,8.28c.22.3.49.46.77.43.28-.03.56-.25.75-.62L18.61,2.38s.02-.09.02-.13h-3.18s-5.39,10.18-5.39,10.18c-.15.29-.42.47-.72.49-.29.01-.57-.12-.75-.37l-2.58-3.59-3.17-.06Z"/></g> <g><path class="cls-1" d="m8.07,18.26c-.42,0-.82-.23-1.12-.64L1,9.33c-.25-.35-.07-.94.28-.94l3.39.06c.1,0,.2.06.27.16l2.61,3.64c.17.24.45.21.6-.06L13.57,1.97c.07-.14.19-.22.32-.22h3.41c.33-.01.51.52.31.88l-8.28,14.74c-.27.51-.69.84-1.15.89-.04,0-.08,0-.12,0Z"/><path class="cls-2" d="m8.07,18.77c-.58,0-1.14-.31-1.53-.86L.58,9.63c-.25-.35-.28-.86-.08-1.25.17-.32.46-.5.78-.5l3.39.06c.26,0,.51.14.68.37l2.46,3.42L13.12,1.73c.16-.31.45-.49.77-.5h3.41s0,0,0,0c.3,0,.58.17.75.45.21.36.22.83.01,1.2l-8.28,14.74c-.35.66-.91,1.08-1.54,1.14-.06,0-.12,0-.17,0ZM1.4,8.91s0,.1.02.13l5.95,8.28c.22.3.49.45.77.43.28-.03.56-.25.75-.62L17.17,2.38s.02-.09.02-.13h-3.18s-5.39,10.18-5.39,10.18c-.15.29-.42.47-.72.49-.29.01-.57-.12-.75-.37l-2.58-3.59-3.17-.06Z"/></g> </symbol> <symbol id="icon-story-recipe"> <g><rect class="cls-2" x="4.89" y="3.52" width="12.28" height="15.3"/><path class="cls-2" d="m17.17,19.35H4.89c-.29,0-.53-.24-.53-.53V3.52c0-.29.24-.53.53-.53h12.28c.29,0,.53.24.53.53v15.3c0,.29-.24.53-.53.53Zm-11.74-1.07h11.21V4.06H5.42v14.23Z"/></g> <g><rect class="cls-1" x="2.83" y="3.52" width="12.28" height="15.3"/><path class="cls-2" d="m15.64,19.35H2.3V2.99h13.34v16.36Zm-12.28-1.07h11.21V4.06H3.37v14.23Z"/></g><path class="cls-2" d="m11.86,7.05h-6.06c-.29,0-.53-.24-.53-.53s.24-.53.53-.53h6.06c.29,0,.53.24.53.53s-.24.53-.53.53Z"/><path class="cls-2" d="m4.28,3.72c-.29,0-.53-.24-.53-.53V1.17c0-.29.24-.53.53-.53s.53.24.53.53v2.02c0,.29-.24.53-.53.53Z"/><path class="cls-2" d="m6.79,3.72c-.29,0-.53-.24-.53-.53V1.17c0-.29.24-.53.53-.53s.53.24.53.53v2.02c0,.29-.24.53-.53.53Z"/><path class="cls-2" d="m9.29,3.72c-.29,0-.53-.24-.53-.53V1.17c0-.29.24-.53.53-.53s.53.24.53.53v2.02c0,.29-.24.53-.53.53Z"/><path class="cls-2" d="m11.8,3.72c-.29,0-.53-.24-.53-.53V1.17c0-.29.24-.53.53-.53s.53.24.53.53v2.02c0,.29-.24.53-.53.53Z"/><path class="cls-2" d="m14.3,3.72c-.29,0-.53-.24-.53-.53V1.17c0-.29.24-.53.53-.53s.53.24.53.53v2.02c0,.29-.24.53-.53.53Z"/><path class="cls-2" d="m11.86,10.15h-6.06c-.29,0-.53-.24-.53-.53s.24-.53.53-.53h6.06c.29,0,.53.24.53.53s-.24.53-.53.53Z"/><path class="cls-2" d="m11.86,13.26h-6.06c-.29,0-.53-.24-.53-.53s.24-.53.53-.53h6.06c.29,0,.53.24.53.53s-.24.53-.53.53Z"/><path class="cls-2" d="m8.84,19.15c-.07,0-.14-.01-.21-.04-.19-.08-.32-.28-.32-.49v-5.89c0-.29.24-.53.53-.53h6.28c.22,0,.41.13.5.34.08.2.03.43-.13.58l-6.28,5.89c-.1.09-.23.14-.36.14Zm.53-5.89v4.13l4.4-4.13h-4.4Z"/> </symbol> <symbol id="icon-tool"> <g><path class="cls-2" d="m17.77,10.4c1.6-1.62,1.46-4.82.51-6.76l-3.19,3.31c-.34.34-.48,1.1-.82.77l-1.18-1.17c-.34-.34-.34-.89,0-1.23l3.42-3.44c-1.65-1.3-4.52-.9-6.12.72s-1.92,4.49-.97,6.43l-4.24,4.27c-.89-.14-1.84.13-2.52.82-1.13,1.14-1.12,2.98.02,4.12s2.98,1.12,4.12-.02c.68-.69.95-1.64.8-2.53l4.24-4.27c1.94.94,4.35.6,5.95-1.02Zm-14.04,6.77c-.55-.54-.55-1.43,0-1.97s1.43-.55,1.97,0,.55,1.43,0,1.97-1.43.55-1.97,0Z"/><path class="cls-2" d="m2.32,18.6c-1.33-1.32-1.34-3.48-.02-4.82.71-.71,1.7-1.07,2.69-.99l3.83-3.86c-.9-2.19-.4-5.05,1.21-6.67,1.81-1.83,4.98-2.18,6.79-.76.11.09.18.22.19.36,0,.14-.04.28-.14.38l-3.42,3.44c-.14.14-.14.38,0,.52l.94.93c.1-.17.21-.36.36-.52l3.19-3.3c.11-.12.27-.17.43-.15.16.03.3.13.37.27,1.06,2.16,1.13,5.57-.6,7.33-1.63,1.64-4.07,2.13-6.19,1.27l-3.83,3.86c.09,1-.27,1.99-.97,2.7-1.32,1.33-3.48,1.34-4.82.02ZM15.72,1.97c-1.46-.72-3.68-.33-4.98.98-1.39,1.4-1.78,4.03-.88,5.86.09.19.06.42-.09.57l-4.24,4.27c-.11.11-.27.17-.43.14-.77-.12-1.55.13-2.09.68-.94.94-.93,2.48.01,3.41s2.48.93,3.41-.01c.54-.55.79-1.33.66-2.1-.03-.16.02-.32.14-.43l4.24-4.27c.15-.15.38-.19.57-.1,1.81.87,3.97.5,5.38-.92,1.23-1.24,1.33-3.68.7-5.51l-2.66,2.76c-.07.07-.15.21-.22.34-.16.28-.33.6-.71.66-.12.02-.37.01-.6-.22l-1.18-1.17c-.53-.53-.54-1.39,0-1.93l2.98-3ZM3.38,17.52c-.74-.73-.75-1.94-.01-2.68s1.94-.75,2.68-.01.75,1.94.01,2.68-1.94.75-2.68.01Zm1.97-1.98c-.35-.35-.92-.35-1.27,0s-.35.92,0,1.27.92.35,1.27,0,.35-.92,0-1.27Z"/></g> <g><path class="cls-1" d="m17.12,9.76c1.6-1.62,1.92-4.02.97-5.96l-3.24,3.27c-.34.34-.89.34-1.23,0l-1.18-1.17c-.34-.34-.34-.89,0-1.23l3.24-3.27c-1.94-.94-4.35-.6-5.95,1.02-1.61,1.62-1.92,4.02-.97,5.96l-4.24,4.27c-.89-.14-1.84.13-2.52.82-1.13,1.14-1.12,2.98.02,4.12s2.98,1.12,4.12-.02c.68-.69.95-1.64.8-2.53l4.24-4.27c1.94.94,4.35.6,5.95-1.02ZM3.82,15.78c-.14-.14-.14-.36,0-.5s.36-.14.5,0,.14.36,0,.5-.36.14-.5,0Z"/><path class="cls-2" d="m1.67,17.95c-1.33-1.32-1.34-3.48-.02-4.82.71-.71,1.7-1.07,2.69-.99l3.83-3.86c-.88-2.11-.41-4.57,1.21-6.2C11.08.35,13.71-.1,15.9.96c.14.07.25.21.27.36.03.16-.02.32-.14.43l-3.24,3.27c-.14.14-.14.38,0,.52l1.18,1.17c.14.14.38.14.52,0l3.24-3.27c.11-.11.27-.17.43-.14.16.03.3.13.37.27,1.07,2.18.65,4.81-1.06,6.53s-4.07,2.13-6.19,1.27l-3.83,3.86c.09,1-.27,1.99-.97,2.7-1.32,1.33-3.48,1.34-4.82.02ZM14.8,1.59c-1.65-.5-3.47-.07-4.71,1.19-1.41,1.42-1.76,3.59-.88,5.39.09.19.06.42-.09.57l-4.24,4.27c-.11.11-.27.17-.43.14-.77-.12-1.55.13-2.09.68-.94.94-.93,2.48.01,3.41s2.48.93,3.41-.01c.54-.55.79-1.33.66-2.1-.03-.16.02-.32.14-.43l4.24-4.27c.15-.15.38-.19.57-.1,1.81.87,3.97.5,5.38-.92,1.24-1.25,1.66-3.08,1.14-4.72l-2.71,2.74c-.53.53-1.39.54-1.93,0l-1.18-1.17c-.53-.53-.54-1.39,0-1.93l2.71-2.74ZM3.47,16.14c-.33-.33-.34-.87,0-1.2s.87-.34,1.2,0,.34.87,0,1.2-.87.34-1.2,0Zm.7-.71c-.06-.06-.15-.06-.2,0s-.06.15,0,.2.15.06.2,0,.06-.15,0-.2Z"/></g> </symbol> <symbol id="icon-newsletter"> <g><polygon class="cls-2" points="3.38 5.68 3.38 7.55 3.38 14.85 3.38 14.85 3.38 16.71 3.38 16.71 18.19 16.71 18.19 14.85 18.19 7.55 18.19 5.68 3.38 5.68"/><path class="cls-2" d="m18.19,17.29H3.38c-.32,0-.58-.26-.58-.58V5.68c0-.32.26-.58.58-.58h14.82c.32,0,.58.26.58.58v11.03c0,.32-.26.58-.58.58Zm-14.23-1.17h13.65V6.27H3.96v9.86Z"/></g> <g><rect class="cls-2" x="1.81" y="4.2" width="14.82" height="11.03"/><path class="cls-2" d="m16.62,15.81H1.81c-.32,0-.58-.26-.58-.58V4.2c0-.32.26-.58.58-.58h14.82c.32,0,.58.26.58.58v11.03c0,.32-.26.58-.58.58Zm-14.23-1.17h13.65V4.79H2.39v9.86Z"/></g> <g><polygon class="cls-1" points="1.81 6.07 9.22 12.27 16.62 6.07 16.62 15.23 1.81 15.23 1.81 6.07"/><path class="cls-2" d="m16.62,15.81H1.81c-.32,0-.58-.26-.58-.58V6.07c0-.23.13-.43.34-.53.21-.09.45-.06.62.08l7.03,5.89,7.03-5.89c.17-.15.42-.18.62-.08s.34.3.34.53v9.17c0,.32-.26.58-.58.58Zm-14.23-1.17h13.65v-7.33l-6.45,5.4c-.22.18-.53.18-.75,0L2.39,7.32v7.33Z"/></g> <g><polygon class="cls-1" points="16.62 6.07 16.62 4.2 1.81 4.2 1.81 6.07 9.22 12.27 16.62 6.07"/><path class="cls-2" d="m9.22,12.85c-.13,0-.27-.05-.37-.14L1.43,6.51c-.13-.11-.21-.28-.21-.45v-1.86c0-.32.26-.58.58-.58h14.82c.32,0,.58.26.58.58v1.86c0,.17-.08.34-.21.45l-7.41,6.2c-.11.09-.24.14-.37.14ZM2.39,5.79l6.82,5.72,6.82-5.72v-1.01H2.39v1.01Zm14.23.27h0,0Z"/></g> </symbol> <symbol id="icon-link"> <path class="cls-2" d="m19.64,5.97c0-1.21-.48-2.34-1.34-3.19-.85-.84-1.98-1.31-3.18-1.31h-.02c-1.21,0-2.34.48-3.19,1.34l-4.44,4.48c-.1.1-.17.21-.26.32h-.02s-4.08,4.07-4.08,4.07c-.85.86-1.31,1.99-1.31,3.2,0,1.21.48,2.34,1.34,3.19.88.87,2.03,1.3,3.18,1.3s2.32-.45,3.21-1.33l4.44-4.48s0,0,0,0l4.35-4.39c.85-.86,1.31-1.99,1.31-3.2Zm-9.38,3.73c.21,0,.54.07.84.36h0c.16.16.25.37.26.6,0,.11-.02.22-.06.33-.31.12-.68.06-.93-.19-.3-.3-.32-.75-.1-1.09Zm3.69-2.53c-.21-.21-.44-.39-.69-.55l.95-.96c.17-.17.39-.26.62-.26.23,0,.45.09.61.25.17.16.26.38.26.62s-.09.45-.25.62l-.95.96c-.16-.24-.35-.47-.56-.68Zm-6.44,6.5c.21.21.44.39.68.55l-.95.95c-.16.17-.35.26-.62.26-.23,0-.45-.09-.61-.25-.34-.34-.34-.89,0-1.23l.95-.96c.16.24.35.47.56.68Z"/><g><path class="cls-1" d="m16.83,2.24h0c-1.57-1.56-4.12-1.55-5.68.03l-4.35,4.39-.08.09c-1.56,1.57-1.55,4.12.03,5.68h0c1.57,1.56,4.12,1.55,5.68-.03l4.44-4.48c1.56-1.57,1.55-4.12-.03-5.68Zm-6,8c-.53.54-1.4.54-1.94,0s-.54-1.4,0-1.94l2.45-2.47,1.41-1.42c.53-.54,1.4-.54,1.94,0s.54,1.4,0,1.94l-3.86,3.89Z"/><path class="cls-2" d="m9.56,14.08c-1.15,0-2.3-.43-3.18-1.3-.86-.85-1.33-1.98-1.34-3.19,0-1.21.46-2.34,1.31-3.2L10.8,1.91c1.75-1.77,4.61-1.78,6.38-.03h0c1.77,1.75,1.78,4.62.03,6.38l-4.44,4.48c-.88.89-2.04,1.33-3.21,1.33ZM14,1.58c-.91,0-1.81.35-2.5,1.04l-4.44,4.48c-.66.67-1.02,1.55-1.02,2.49s.37,1.82,1.04,2.48c1.38,1.36,3.6,1.35,4.97-.02l4.44-4.48c1.36-1.38,1.35-3.61-.02-4.97-.68-.68-1.58-1.02-2.47-1.02Zm-4.15,9.57c-.5,0-.96-.19-1.32-.54-.73-.73-.74-1.92-.01-2.65l3.86-3.89c.35-.35.82-.55,1.32-.55h0c.5,0,.97.19,1.32.54.35.35.55.82.55,1.32,0,.5-.19.97-.54,1.33l-3.86,3.89c-.35.36-.82.55-1.32.56h0Zm3.86-6.64h0c-.23,0-.45.09-.62.26l-3.86,3.89c-.34.34-.34.9,0,1.24.17.17.37.28.62.25.23,0,.45-.09.62-.26h0l3.86-3.89c.16-.17.25-.39.25-.62,0-.23-.09-.45-.26-.62-.17-.16-.38-.25-.62-.25Z"/></g><g><path class="cls-1" d="m9.4,8.4.93.4c.55.53.54,1.4,0,1.94l-3.86,3.89c-.53.54-1.4.54-1.94,0s-.54-1.4,0-1.94l1.41-1.42c-.96-1.94.5-4.23.5-4.23l-4.08,4.08c-1.56,1.57-1.55,4.12.03,5.68h0c1.57,1.56,4.12,1.55,5.68-.03l4.44-4.48c1.56-1.57,1.55-4.12-.03-5.68h0c-.34-.34-.73-.6-1.15-.8l-2.45,2.47s.81-.13,1.45.49Z"/><path class="cls-2" d="m5.21,18.47c-1.2,0-2.33-.46-3.18-1.31-1.77-1.75-1.78-4.62-.03-6.38l4.08-4.08.78.62s-1.3,2.08-.48,3.74l-.09.57-1.41,1.42c-.34.34-.34.9,0,1.24.34.34.9.33,1.24,0l3.86-3.89c.17-.17.26-.39.26-.63,0-.23-.09-.44-.26-.6h0c-.44-.43-1-.36-1.03-.36l-.43-.85,2.45-2.47.56-.1c.48.22.91.52,1.29.89.86.85,1.33,1.98,1.34,3.19s-.46,2.34-1.31,3.2l-4.44,4.48c-.85.86-1.98,1.33-3.19,1.34h-.02Zm-.04-9.45l-2.46,2.46c-1.36,1.37-1.35,3.6.02,4.97.66.66,1.54,1.02,2.47,1.02h.02c.94,0,1.82-.37,2.48-1.04l4.44-4.48c.66-.67,1.02-1.55,1.02-2.49,0-.94-.37-1.82-1.04-2.48-.21-.21-.45-.39-.7-.54l-1.5,1.51c.25.1.51.25.75.48h0c.36.34.56.81.56,1.31,0,.51-.19.99-.54,1.35l-3.86,3.89c-.73.73-1.92.74-2.65.01-.73-.73-.74-1.92-.01-2.65l1.17-1.18c-.27-.73-.28-1.48-.17-2.15Z"/></g> </symbol> <symbol id="icon-related-instagram"> <path class="cls-2" d="m18.52,5.14c-.26-.75-.97-1.29-1.81-1.29h-1.48v-.49c0-.79-.64-1.43-1.43-1.43h-4.32c-.79,0-1.43.64-1.43,1.43v.49H2.46c-1.06,0-1.93.86-1.93,1.93v9.35c0,.84.54,1.55,1.29,1.81.26.75.97,1.29,1.81,1.29h14.25c1.06,0,1.93-.87,1.93-1.93V6.96c0-.84-.54-1.55-1.29-1.81Z"/><path class="cls-1" d="m2.46,4.86h14.25c.51,0,.93.42.93.93v9.35c0,.51-.42.93-.93.93H2.46c-.51,0-.93-.42-.93-.93V5.78c0-.51.42-.93.93-.93Z"/><path class="cls-2" d="m9.59,15.52c-2.68,0-4.86-2.18-4.86-4.86s2.18-4.86,4.86-4.86,4.86,2.18,4.86,4.86-2.18,4.86-4.86,4.86Zm0-8.72c-2.13,0-3.86,1.73-3.86,3.86s1.73,3.86,3.86,3.86,3.86-1.73,3.86-3.86-1.73-3.86-3.86-3.86Z"/><circle class="cls-2" cx="9.59" cy="10.66" r="2.7"/><path class="cls-2" d="m15.9,6.8h-1.27c-.28,0-.5-.22-.5-.5s.22-.5.5-.5h1.27c.28,0,.5.22.5.5s-.22.5-.5.5Z"/> </symbol> <symbol id="icon-speech-bubble"> <path class="cls-2" d="m15.44,3.22H4.56c-2.11,0-3.82,1.71-3.82,3.82v4.7c0,2.11,1.71,3.82,3.82,3.82h3.86c.2,1.11.71,1.97,1.51,2.54.87.62,1.92.77,2.75.77.22,0,.41-.01.59-.03.18.01.35.03.52.03.78,0,1.37-.14,1.42-.15.23-.05.4-.25.42-.48.02-.23-.11-.46-.32-.56-1.09-.5-1.06-1.55-.96-2.12h1.1c2.11,0,3.82-1.71,3.82-3.82v-4.7c0-2.11-1.71-3.82-3.82-3.82ZM1.84,7.04c0-.07.02-.13.02-.2,0,.07-.02.13-.02.2h0Z"/><path class="cls-1" d="m4.56,4.32c-1.5,0-2.71,1.22-2.71,2.71v4.7c0,1.5,1.22,2.71,2.71,2.71h4.34c.29,0,.52.22.55.5.1,1.03.48,1.78,1.12,2.24.62.44,1.39.56,2.02.57-.69-.98-.55-2.25-.31-2.94.08-.22.29-.37.52-.37h1.53c1.5,0,2.71-1.22,2.71-2.71v-4.7c0-1.5-1.22-2.71-2.71-2.71H4.56Z"/> </symbol> <symbol id="pointer-arrow_350px"> <g class="donation-pointer__arrowhead"><polygon points="330.7 17 339.2 2.2 347.7 17 330.7 17" fill="#ff335f" stroke-width="0"/><path d="m339.2,3.9l7,12.1h-14l7-12.1m0-3.5l-1.5,2.6-7,12.1-1.5,2.6h20l-1.5-2.6-7-12.1-1.5-2.6h0Z" fill="#f3f2f1" stroke-width="0"/></g><path class="donation-pointer__path" d="m339.2,12.2s0,8-.7,13.9c-2.1,16.5-19.3,59.4-53.9,60.3-30.5.8-42-34.1-58.3-56.4-16.3-22.3-45.5-54-85.3,2.8C101.1,89.5.6,48.7.6,48.7" fill="none" stroke="url(#arrow-linear-gradient)" stroke-miterlimit="10"/> </symbol> <symbol id="pointer-arrow_250px"> <g class="donation-pointer__arrowhead"><polygon points="230 18.4 238.5 3.6 247 18.4 230 18.4" fill="#ff335f" stroke-width="0"/><path d="m238.5,5.4l7,12.1h-14l7-12.1m0-3.5l-1.5,2.6-7,12.1-1.5,2.6h20l-1.5-2.6-7-12.1-1.5-2.6h0Z" fill="#f3f2f1" stroke-width="0"/></g><path class="donation-pointer__path" d="m237.9,16.6s0,5.6-.5,9.7c-1.5,11.6-13.6,41.7-37.9,42.4-21.4.6-29.5-24-41-39.6-11.5-15.7-31.9-38-59.9,1.9C70.6,70.9,0,42.2,0,42.2" fill="none" stroke="url(#arrow-linear-gradient)" stroke-miterlimit="10"/> </symbol> <symbol id="pointer-arrow_160px"> <g class="donation-pointer__arrowhead"><polygon points="140 18.4 148.5 3.6 157 18.4 140 18.4" fill="#ff335f" stroke-width="0"/><path d="m148.5,5.4l7,12.1h-14l7-12.1m0-3.5l-1.5,2.6-7,12.1-1.5,2.6h20l-1.5-2.6-7-12.1-1.5-2.6h0Z" fill="#f3f2f1" stroke-width="0"/></g><path class="donation-pointer__path" d="m148.6,12.7s0,.8,0,4.8c0,14-9.5,27.3-24.6,25.9-18.2-1.7-21-19.3-25.6-28s-19.7-20.3-37.1,4.5S0,26.9,0,26.9" fill="none" stroke="#ff335f" stroke-miterlimit="10" stroke-width="0.5"/> </symbol> <symbol id="pointer-arrow_75px"> <g class="donation-pointer__arrowhead"><polygon points="101 18.4 109.5 3.6 118 18.4 101 18.4" fill="#ff335f" stroke-width="0"/><path d="m109.5,5.4l7,12.1h-14l7-12.1m0-3.5l-1.5,2.6-7,12.1-1.5,2.6h20l-1.5-2.6-7-12.1-1.5-2.6h0Z" fill="#f3f2f1" stroke-width="0"/></g><path class="donation-pointer__path" d="m109.5,17s0,.8,0,4.8c0,14-9.5,27.3-24.6,25.9-18.2-1.7-21-19.3-25.6-28S39.6-.6,22.2,24.2s-61.3,7-61.3,7" fill="none" stroke="#ff335f" stroke-miterlimit="10" stroke-width="0.5"/> </symbol> </defs> </svg> <a href="#content" class="visually-hidden focusable">Skip navigation</a> <header class="site-header site-header--full" role="banner"> <div class='site-header__nav'> <div class="site-header__nav-inner"> <a class='site-header__link site-header__link--menu js-MenuToggle' role="button" aria-controls="menu" aria-label="Site menu">Menu <svg class='site-header__link-icon' aria-hidden="true"><use xlink:href='#icon-chevron'></use></svg> </a> <a href="/" class="site-header__branding site-header__logo"> <svg viewBox='0 0 538.7 98' class='site-header__logo logo__no-bg ' aria-hidden="true"><use xlink:href="#markup-logo"></use></svg> <span class="visually-hidden">The Markup</span> </a> <a href='/donate' class='site-header__link site-header__link--donate' data-utm-source="header">Donate </a> <ul class='site-header__links'> <li class="site-header__links-item"> <a href="/about" class="site-header__link">About Us</a> </li> <li class="site-header__links-item"> <a href="/donate" class="site-header__link button"> <span class="button__label">Donate</span> </a> </li> </ul> </div> </div><p class='site-header__statement'>Challenging technology to serve the public good.</p></header> <div class="print-only"> <div class="print-logo"> <svg viewBox="0 0 538.7 98" class="site-header__logo"><use xlink:href="#markup-logo"></use></svg> </div> <h1 class="article-title">Facebook Is Receiving Sensitive Medical Information from Hospital Websites</h1> <div class="article-byline">By Todd Feathers, Simon Fondrie-Teitler, Angie Waller, and Surya Mattu </div> <div class="article-date">June 16, 2022 06:00 ET</div> <div class="article-link">Viewable online at<br><a href="https://themarkup.org/pixel-hunt/2022/06/16/facebook-is-receiving-sensitive-medical-information-from-hospital-websites">https://themarkup.org/pixel-hunt/2022/06/16/facebook-is-receiving-sensitive-medical-information-from-hospital-websites</a></div> </div><article id="content" class="article-single article-single--investigation article-single--larger-topper " role="main"> <div class="article-single-inner"> <header class="article-header"> <div class='article-art__wrapper'> <div class="article-art"> <figure class="article-figure"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/PixelHospital_Final-1440x810.jpg, https://mrkp-static-production.themarkup.org/uploads/2022/06/PixelHospital_Final-2400x1350.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/PixelHospital_Final-750x422.jpg, https://mrkp-static-production.themarkup.org/uploads/2022/06/PixelHospital_Final-1280x720.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2022/06/PixelHospital_Final-1440x810.jpg" alt="Illustration of a greyed out web browser showing a hospital portal. A white hand behind it is pulling off a strip of the browser and pills are falling out of that strip. There is a blue glow behind the edge of the browser window." class="article-img"> </picture> </figure> </div> <figcaption class="article-caption print-only"> <span class="article-caption-label"></span> <span class="article-source"> <a href="https://www.ansonchanson.com/" target="_blank" class="article-source__link">Anson Chan</a> </span> </figcaption> </div> <div class="article-titles "> <div class="article-titles__inner print-hidden"><p class="article-type"><a href="/series/pixel-hunt" class="article-type__link article-type__link--series">Pixel Hunt</a></p><h1 class="article-title">Facebook Is Receiving Sensitive Medical Information from Hospital Websites</h1> <p class="article-subhead"> Experts say some hospitals’ use of an ad tracking tool may violate a federal law protecting health information <span class="article-author"> <span>By </span> <a class="article-author__link" href="https://themarkup.org/people/todd-feathers/">Todd Feathers</a>, <a class="article-author__link" href="https://themarkup.org/people/simon-fondrie-teitler/">Simon Fondrie-Teitler</a>, <a class="article-author__link" href="https://themarkup.org/people/angie-waller/">Angie Waller</a>, and <a class="article-author__link" href="https://themarkup.org/people/surya-mattu/">Surya Mattu</a> </span> </p> <div class="article-date"> <time datetime="2022-06-16T06:00:00">June 16, 2022 06:00 ET</time><div class="article-date__modified"> Updated <time datetime="2023-07-19T09:29:49">July 19, 2023 09:29 ET</time> </div></div> <figcaption class='article-caption'> <span class='article-caption-label'></span> <span class="article-source"> <a href="https://www.ansonchanson.com/" target="_blank" class="article-source__link">Anson Chan</a> </span> </figcaption> </div> </div> </header> <div class="article-body"> <div class="article-meta"> <div class='article-meta__share' role="complementary" aria-labelledby="article-meta__share__heading"> <h3 id="article-meta__share__heading" class='article-meta__title' aria-hidden="true">Share This Article</h3> <a class="button article-meta__button js-CopyLink"> <span class='button__label button__label--main'> Copy Link </span></a> <a class="button article-meta__button js-open-republisher"> <span class='button__label button__label--main'> Republish </span></a> </div> <div class="article-collaboration" aria-label="copublished" role="complementary"> <h3 class="article-meta__title">This article is copublished with</h3> <div class="article-meta__collaboration-logo"> <a class="article-meta__collaboration-link" href="https://www.statnews.com/2022/06/16/facebook-meta-pixel-hospitals-data/"> <span class="visually-hidden">Read on our collaborator's site</span> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/stat-logo-360x97.png, https://mrkp-static-production.themarkup.org/uploads/2022/06/stat-logo-720x195.png 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/stat-logo-360x97.png, https://mrkp-static-production.themarkup.org/uploads/2022/06/stat-logo-720x195.png 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2022/06/stat-logo-360x97.png" alt="STAT logo" class="article-meta__collaboration-img"> </picture> </a> </div> </div> </div> <div class="downloads downloads--right " role="complementary"> <div class="downloads__content"> <h3 class="downloads__heading">See our data here.</h3> <div class="downloads__buttons"> <a href="https://github.com/the-markup/investigation-pixel-hospitals/" class="button "> <span class='button__label button__label--main'> GitHub </span></a> </div> </div> </div> <p>A tracking tool installed on many hospitals’ websites has been collecting patients’ sensitive health information—including details about their medical conditions, prescriptions, and doctor’s appointments—and sending it to Facebook. </p> <p>The Markup tested the websites of <a href="https://www.newsweek.com/worlds-best-hospitals-2022/united-states" target="_blank">Newsweek’s</a> top 100 hospitals in America. On 33 of them we found the tracker, called the Meta Pixel, sending Facebook a packet of data whenever a person clicked a button to schedule a doctor’s appointment. The data is connected to an IP address—an identifier that’s like a computer’s mailing address and can generally be linked to a specific individual or household—creating an intimate receipt of the appointment request for Facebook.</p> <div id="a-third-of-top-hospitals-websites-sent-patient-data-to-facebook" class="datawrapper datawrapper--align print-hidden "> <a href="#a-third-of-top-hospitals-websites-sent-patient-data-to-facebook" class="heading__link">↩︎ link</a><div class="datawrapper-iframe" aria-hidden="true"> <iframe title="A Third of Top Hospitals’ Websites Sent Patient Data to Facebook" aria-label="Interactive area chart" id="datawrapper-chart-lZ9dV" src="https://datawrapper.dwcdn.net/lZ9dV/22/" scrolling="no" frameborder="0" style="width: 0; min-width: 100% !important; border: none;" height="602"></iframe><script type="text/javascript">!function(){"use strict";window.addEventListener("message",(function(e){if(void 0!==e.data["datawrapper-height"]){var t=document.querySelectorAll("iframe");for(var a in e.data["datawrapper-height"])for(var r=0;r<t.length;r++){if(t[r].contentWindow===e.source)t[r].style.height=e.data["datawrapper-height"][a]+"px"}}}))}(); </script> </div> </div> <p>On the website of University Hospitals Cleveland Medical Center, for example, clicking the “Schedule Online” button on a doctor’s page prompted the Meta Pixel to send Facebook the text of the button, the doctor’s name, and the search term we used to find her: “pregnancy termination.” </p> <article class="article-card article-card--medium article-card--has-image article-card--left" role="complementary"> <a href="https://themarkup.org/pixel-hunt/2022/06/21/this-childrens-hospital-network-was-giving-kids-information-to-facebook" class="article-card__link"> <div class="article-card__art"> <figure class="article-card__figure"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/GettyImages-1234688304_reduced-841x473.jpg, https://mrkp-static-production.themarkup.org/uploads/2022/06/GettyImages-1234688304_reduced-1682x946.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/GettyImages-1234688304_reduced-750x422.jpg, https://mrkp-static-production.themarkup.org/uploads/2022/06/GettyImages-1234688304_reduced-1140x641.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2022/06/GettyImages-1234688304_reduced-841x473.jpg" alt="A red emergency sign outside Neemours Children's Hospital" class="article-card__img"> </picture> </figure> </div> <div class="article-card__content"> <div class="article-card__content-inner "> <p class="article-card-type"><span class="article-card-type__series">Pixel Hunt</span></p> <h3 class="article-card__headline "> This Children’s Hospital Network Was Giving Kids’ Information to Facebook </h3><p class="article-card__subhead">When parents scheduled an appointment for their children on the Nemours page, Facebook received that information</p><time class="article-card__date" datetime="2022-06-21T13:00:00">June 21, 2022 13:00 ET</time></div> </div> </a> </article> <p>Clicking the “Schedule Online Now” button for a doctor on the website of Froedtert Hospital, in Wisconsin, prompted the Meta Pixel to send Facebook the text of the button, the doctor’s name, and the condition we selected from a dropdown menu: “Alzheimer’s.”</p> <p>The Markup also found the Meta Pixel installed inside the password-protected patient portals of seven health systems. On five of those systems’ pages, we documented the pixel sending Facebook data about real patients who volunteered to participate in the Pixel Hunt project, a collaboration between The Markup and Mozilla Rally. The project is a <a href="https://rally.mozilla.org/current-studies/facebook-pixel-hunt/index.html?utm_source=markupweb" target="_blank">crowd-sourced undertaking</a> in which anyone can install <a href="https://rally.mozilla.org/about-rally/?utm_source=markupweb" target="_blank">Mozilla’s Rally browser add-on</a> in order to send The Markup data on the Meta Pixel as it appears on sites that they visit. The data sent to hospitals included the names of patients’ medications, descriptions of their allergic reactions, and details about their upcoming doctor’s appointments.</p> <div id="health-systems-with-meta-pixels-on-their-patient-portals" class="datawrapper datawrapper--align print-hidden "> <a href="#health-systems-with-meta-pixels-on-their-patient-portals" class="heading__link">↩︎ link</a><div class="datawrapper-iframe" aria-hidden="true"> <iframe title="Health Systems with Meta Pixels on Their Patient Portals" aria-label="Interactive area chart" id="datawrapper-chart-PJcfZ" src="https://datawrapper.dwcdn.net/PJcfZ/15/" scrolling="no" frameborder="0" style="width: 0; min-width: 100% !important; border: none;" height="434"></iframe><script type="text/javascript">!function(){"use strict";window.addEventListener("message",(function(e){if(void 0!==e.data["datawrapper-height"]){var t=document.querySelectorAll("iframe");for(var a in e.data["datawrapper-height"])for(var r=0;r<t.length;r++){if(t[r].contentWindow===e.source)t[r].style.height=e.data["datawrapper-height"][a]+"px"}}}))}(); </script> </div> </div> <p>Former regulators, health data security experts, and privacy advocates who reviewed The Markup’s findings said the hospitals in question may have violated the federal Health Insurance Portability and Accountability Act (HIPAA). The law prohibits covered entities like hospitals from sharing personally identifiable health information with <a href="https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/marketing/index.html" target="_blank">third parties like Facebook</a>, except when an individual has expressly consented in advance or under certain contracts. </p> <p>Neither the hospitals nor Meta said they had such contracts in place, and The Markup found no evidence that the hospitals or Meta were otherwise obtaining patients’ express consent.</p> <p>“I am deeply troubled by what [the hospitals] are doing with the capture of their data and the sharing of it,” said David Holtzman, a health privacy consultant who previously served as a senior privacy adviser in the U.S. Department of Health and Human Services’ Office for Civil Rights, which enforces HIPAA. “I cannot say [sharing this data] is for certain a HIPAA violation. It is quite likely a HIPAA violation.”</p> <p>University Hospitals Cleveland Medical Center spokesperson George Stamatis did not respond to The Markup’s questions but said in a brief statement that the hospital “comport[s] with all applicable federal and state laws and regulatory requirements.”</p> <p>After reviewing The Markup’s findings, Froedtert Hospital removed the Meta Pixel from its website “out of an abundance of caution,” Steve Schooff, a spokesperson for the hospital, wrote in a statement.</p> <figure class="wp-block-pullquote alignright"><blockquote><p>This is an extreme example of exactly how far the tentacles of Big Tech reach into what we think of as protected data space.</p><cite>Nicholson Price, University of Michigan </cite></blockquote></figure> <p>As of June 15, six other hospitals had also removed pixels from their appointment booking pages and at least five of the seven health systems that had Meta Pixels installed in their patient portals had removed those pixels.</p> <p>The 33 hospitals The Markup found sending patient appointment details to Facebook collectively reported more than 26 million patient admissions and outpatient visits in 2020, according to the most <a href="https://guide.prod.iam.aha.org/guide/" target="_blank">recent data available</a> from the American Hospital Association. Our investigation was limited to just over 100 hospitals; the data sharing likely affects many more patients and institutions than we identified.</p> <p>Facebook itself is not subject to HIPAA, but the experts interviewed for this story expressed concerns about how the advertising giant might use the personal health data it’s collecting for its own profit.</p> <p>“This is an extreme example of exactly how far the tentacles of Big Tech reach into what we think of as a protected data space,” said Nicholson Price, a University of Michigan law professor who studies big data and health care. “I think this is creepy, problematic, and potentially illegal” from the hospitals’ point of view.</p> <p>The Markup was unable to determine whether Facebook used the data to target advertisements, train its recommendation algorithms, or profit in other ways.</p> <p>Facebook’s parent company, Meta, did not respond to questions. Instead, spokesperson Dale Hogan sent a brief email paraphrasing the company’s <a href="https://www.facebook.com/business/help/361948878201809?id=188852726110565" target="_blank">sensitive health data policy</a>.</p> <p>“If Meta’s signals filtering systems detect that a business is sending potentially sensitive health data from their app or website through their use of Meta Business Tools, which in some cases can happen in error, that potentially sensitive data will be removed before it can be stored in our ads systems,” Hogan wrote.</p> <article class="article-card article-card--medium article-card--has-image article-card--left" role="complementary"> <a href="https://themarkup.org/pixel-hunt/2022/06/15/facebook-and-anti-abortion-clinics-are-collecting-highly-sensitive-info-on-would-be-patients" class="article-card__link"> <div class="article-card__art"> <figure class="article-card__figure"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/pregnancy-tracking-revised-reduced-841x473.jpg, https://mrkp-static-production.themarkup.org/uploads/2022/06/pregnancy-tracking-revised-reduced-1682x946.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/pregnancy-tracking-revised-reduced-750x422.jpg, https://mrkp-static-production.themarkup.org/uploads/2022/06/pregnancy-tracking-revised-reduced-1140x641.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2022/06/pregnancy-tracking-revised-reduced-841x473.jpg" alt="Illustration of a woman in a hospital gown standing on top of a device. The device screen shows an appointment form, with the submit button right underneath the woman. The submit button is drawn to look like it's made out of glass, and underneath is a bottomless pit." class="article-card__img"> </picture> </figure> </div> <div class="article-card__content"> <div class="article-card__content-inner "> <p class="article-card-type"><span class="article-card-type__series">Pixel Hunt</span></p> <h3 class="article-card__headline "> Facebook and Anti-Abortion Clinics Are Collecting Highly Sensitive Info on Would-Be Patients </h3><p class="article-card__subhead">The social media giant gathers data from crisis pregnancy centers through a tracking tool that works whether or not a person is logged in to their Facebook account </p><time class="article-card__date" datetime="2022-06-15T06:00:00">June 15, 2022 06:00 ET</time></div> </div> </a> </article> <p>Meta did not respond to follow-up questions, but Hogan appears to be referencing a sensitive health information filtering system that the company launched in July 2020 in response to a <a href="https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636" target="_blank">Wall Street Journal article</a> and New York Department of Financial Services investigation. Meta told the investigators that the filtering system was “not yet operating with complete accuracy,” according to the department’s February 2021 <a href="https://www.dfs.ny.gov/system/files/documents/2021/02/facebook_report_20210218.pdf" target="_blank">final report</a>.</p> <p>The Markup was unable to confirm whether any of the data referenced in this story was in fact removed before being stored by Meta. However, a recent <a href="https://themarkup.org/pixel-hunt/2022/06/15/facebook-and-anti-abortion-clinics-are-collecting-highly-sensitive-info-on-would-be-patients">joint investigation with Reveal</a> found that Meta’s sensitive health information filtering system didn’t block information about appointments a reporter requested with crisis pregnancy centers.</p> <p>Internally, Facebook employees have been blunt about how well—or not so well—the company generally protects sensitive data.</p> <p>“We do not have an adequate level of control and explainability over how our systems use data, and thus we can’t confidently make controlled policy changes or external commitments such as ‘we will not use X data for Y purpose.’ ” Facebook engineers on the ad and business product team wrote in a 2021 privacy overview that was <a href="https://www.vice.com/en/article/akvmke/facebook-doesnt-know-what-it-does-with-your-data-or-where-it-goes" target="_blank">leaked to Vice</a>.</p> <div class="heading heading--level2 "> <a href="#almost-any-patient-would-be-shocked" class="heading__link">↩︎ link</a> <h2 id="almost-any-patient-would-be-shocked" class="heading__text">“Almost Any Patient Would Be Shocked”</h2> </div> <p>The Meta Pixel is a snippet of code that tracks users as they navigate through a website, logging which pages they visit, which buttons they click, and certain information they enter into forms. It’s one of the most prolific tracking tools on the internet—present on more than 30 percent of the most popular sites on the web, according to The Markup’s <a href="https://themarkup.org/blacklight/2020/09/22/blacklight-tracking-advertisers-digital-privacy-sensitive-websites">analysis</a>.</p> <p>In exchange for installing its pixel, Meta provides website owners analytics about the ads they’ve placed on Facebook and Instagram and tools to target people who’ve visited their website.</p> <article class="article-card article-card--medium article-card--has-image article-card--right" role="complementary"> <a href="https://themarkup.org/show-your-work/2022/04/28/how-we-built-a-meta-pixel-inspector" class="article-card__link"> <div class="article-card__art"> <figure class="article-card__figure"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/04/pixel-hunt-methodology-distorted-reduced-841x473.jpg, https://mrkp-static-production.themarkup.org/uploads/2022/04/pixel-hunt-methodology-distorted-reduced-1682x946.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/04/pixel-hunt-methodology-distorted-reduced-750x422.jpg, https://mrkp-static-production.themarkup.org/uploads/2022/04/pixel-hunt-methodology-distorted-reduced-1140x641.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2022/04/pixel-hunt-methodology-distorted-reduced-841x473.jpg" alt="Illustration of a glowing Meta logo in the center, surrounded by 3D pixels with grid overlays on them. The background is also a warped grid." class="article-card__img"> </picture> </figure> </div> <div class="article-card__content"> <div class="article-card__content-inner "> <p class="article-card-type"><span class="article-card-type__series">Show Your Work</span><span class="article-card-type__series">Pixel Hunt</span></p> <h3 class="article-card__headline "> How We Built a Meta Pixel Inspector </h3><p class="article-card__subhead">The first large-scale, crowdsourced study that monitors how Meta tracks people across the internet</p><time class="article-card__date" datetime="2022-04-28T08:00:00">April 28, 2022 08:00 ET</time></div> </div> </a> </article> <p>The Meta Pixel sends information to Facebook via scripts running in a person’s internet browser, so each data packet comes labeled with an IP address that can be used in combination with other data to <a href="https://us.norton.com/internetsecurity-privacy-what-does-an-ip-address-tell-you.html" target="_blank">identify an individual or household</a>. </p> <p>HIPAA lists IP addresses as one of the <a href="https://www.luc.edu/its/aboutits/itspoliciesguidelines/hipaainformation/18hipaaidentifiers/" target="_blank">18 identifiers</a> that, when linked to information about a person’s health conditions, care, or payment, can qualify the data as protected health information. Unlike anonymized or aggregate health data, hospitals can’t share protected health information with third parties except under the strict terms of business associate agreements that restrict how the data can be used.</p> <p>In addition, if a patient is logged in to Facebook when they visit a hospital’s website where a Meta Pixel is installed, some browsers will attach third-party cookies—another tracking mechanism—that allow Meta to link pixel data to specific Facebook accounts.</p> <p>And in several cases we found—using both dummy accounts created by our reporters and data from Mozilla Rally volunteers—that the Meta Pixel made it even easier to identify patients. </p> <p>When The Markup clicked the “Finish Booking” button on a Scripps Memorial Hospital doctor’s page, the pixel sent Facebook not just the name of the doctor and her field of medicine but also the first name, last name, email address, phone number, zip code, and city of residence we entered into the booking form. </p> <div id="block9" class="promotion print-hidden js-promotion promotion--donate promotion--has-image promotion--left " data-promotion="donate-report-deeply-and-fix-things-1-202205"> <div class="promotion__inner" data-href="/donate-202205"> <h2 class="promotion__heading"><a href="/donate-202205" class="promotion__link js-promotion-link">Report Deeply and Fix Things</a></h2> <a href="/donate-202205" class="js-promotion-link"> <figure class="promotion__figure"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2021/11/support_woman_16-9-360x203.jpg, https://mrkp-static-production.themarkup.org/uploads/2021/11/support_woman_16-9-750x422.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2021/11/support_woman_16-9-750x422.jpg, https://mrkp-static-production.themarkup.org/uploads/2021/11/support_woman_16-9-1140x641.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2021/11/support_woman_16-9-360x203.jpg" alt="" class="promotion__img"> </picture> </figure> </a> <div class="promotion__content"> <p class="promotion__description"><p>Because it turns out moving fast and breaking things broke some super important things.</p> </p> <a href="/donate-202205" class="button button--important js-promotion-link"> <span class='button__label button__label--main'> Give Now </span></a> </div> </div> </div> <p>The Meta Pixel “hashed” those personal details—obscuring them through a form of cryptography—before sending them to Facebook. But that hashing doesn’t prevent Facebook from using the data. In fact, Meta <a href="https://www.facebook.com/business/help/611774685654668?id=1205376682832142" target="_blank">explicitly uses</a> the hashed information to link pixel data to Facebook profiles. </p> <p>Using a <a href="https://crackstation.net/" target="_blank">free online tool, </a>The Markup was also able to reverse most of our hashed test information that the pixel on Scripps Memorial Hospital’s website sent to Facebook. </p> <p>Scripps Memorial didn’t respond to The Markup’s questions but it did remove the Meta Pixel from the final webpages in the appointment booking process after we shared our findings with the hospital.</p> <p>On other hospitals’ websites, we documented the Meta Pixel collecting similarly intimate information about real patients.</p> <p>When one real patient who participated in the Pixel Hunt study logged in to the MyChart portal for Piedmont Healthcare, a Georgia health system, the Meta Pixel installed in the portal told Facebook the patient’s name, the name of their doctor, and the time of their upcoming appointment, according to data collected by the participant’s Mozilla Rally browser extension.</p> <div id="" class="graphics graphics-- print-hidden "> <a href="#" class="graphics__link">↩︎ link</a> <h3 class="graphics__heading">The Meta Pixel collects sensitive health information and shares it with Facebook</h3> <h4 class="graphics__subheading">The Meta Pixel installed on Piedmont Healthcare’s MyChart portal sent Facebook details about a real patient's upcoming doctor's appointment, including date, time, the patient’s name, and the name of their doctor</h4> <div class="graphics__content print-hidden"> <ol class="code-block-annotation_list"> <li><span class="code-block_annotation">1</span>Patient name</li> <li><span class="code-block_annotation">2</span>Date and time of appointment</li> <li><span class="code-block_annotation">3</span>Name of provider</li> </ol> <div class="code-block"> <p class="code-block_text">{"classList":"_Link+_actionable+_link+_readOnlyText+_InternalLink+main","destination":"https://mychart.piedmont.org/PRD/app/communication-center/conversation?id=ID REDACTED BY THE MARKUP","id":"","imageUrl":"/PRD/en-US/images/ProviderSilhouette.png","innerText":"MyChart+Messaging+User\nREDACTED BY THE MARKUP\nAppointment+scheduled+from+MyChart\ nThere+is+a+message+in+this+conversation+that+has+not+yet+been+viewed.\n<span class="code-block_annotation">1</span><span class="code-block_highlight">Appointment+For:+NAME REDACTED BY THE MARKUP</span>+(ID REDACTED BY THE MARKUP)+Visit+Type:+NEW+PATIENT+(ID REDACTED BY THE MARKUP)+ +<span class="code-block_annotation">2</span><span class="code-block_highlight">MM/DD/YYYY+0:00+XX+00+mins</span>.+<span class="code-block_annotation">3</span><span class="code-block_highlight">NAME REDACTED BY THE MARKUP,+MD</span>","numChildButtons":0,"tag":"a","name":""}</p> </div> </div> <img src="https://mrkp-static-production.themarkup.org/graphics/2022-hippa-code-block_graphic/1655139794921/fallback.png" class="print-only" alt=""> <div class="graphics__source"> Source: mychart.piedmont.org, Mozilla Rally </div> <style> @import url("https://fonts.googleapis.com/css2?family=Roboto+Mono:wght@300;400;500&display=swap"); .code-block { background-color: #EAEAEA; padding: 25px; margin-bottom: 15px; } .code-block_text { word-wrap: break-word; font-family: "Roboto Mono", monospace; color: #808285; font-size: 14px; } .code-block_highlight { background-color: #dffe5a; font-weight: 500; color: #242a49; } .code-block_annotation { font-family: "messina", sans-serif; font-weight: 500; background-color: #ff335f; color: #ffffff; border-radius: 50%; padding: 1px 6px; margin: 5px; text-align: center; font-variant-numeric: tabular-nums; } .code-block-annotation_list { margin: 15px 0; } </style> <script src="https://mrkp-static-production.themarkup.org/graphics/2022-hippa-code-block_graphic/1655139794921/main.js"></script> </div> <p>When another Pixel Hunt participant used the MyChart portal for Novant Health, a North Carolina–based health system, the pixel told Facebook the type of allergic reaction the patient had to a specific medication.</p> <p>The Markup created our own MyChart account through Novant Health to further investigate and found the Meta Pixel collecting a variety of other sensitive information. </p> <p>Clicking on one button prompted the pixel to tell Facebook the name and dosage of a medication in our health record, as well as any notes we had entered about the prescription. The pixel also told Facebook which button we clicked in response to a question about sexual orientation.</p> <p>“Our Meta pixel placement is guided by a third party vendor and it has been removed while we continue to look into this matter,” Novant spokesperson Megan Rivers wrote in an email.</p> <p>Epic Systems, the software company behind MyChart, has “specifically recommended heightened caution around the use of custom analytics scripts,” Stirling Martin, a senior vice president for the company, wrote in an email.</p> <p>Facebook is <a href="https://www.washingtonpost.com/news/posteverything/wp/2018/04/18/facebook-knows-a-ton-about-your-health-now-they-want-to-make-money-off-it/" target="_blank">able to infer intimate details</a> about people’s health conditions using other means—for example, the fact that a person “liked” a Facebook group associated with a particular disease—but the data collected by pixels on hospitals’ websites is more direct. And in sharing it with Facebook, experts said, health care providers risk damaging patients’ trust in an increasingly digitized health system.</p> <div class="multiple-images multiple-images--align-wide multiple-images--horizontal multiple-images--2-images js-multiple-images "> <ol class="multiple-images__items"> <li class="multiple-images__item"> <figure> <div class="multiple-images__image-wrapper"> <div class="js-expandable-image" data-fullscreen-desktop="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-1.png" data-fullscreen-mobile="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-1.png"><picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-1-720x783.png, https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-1.png 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-1-720x783.png, https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-1.png 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-1-720x783.png" alt="Screenshot of the Novant Health portal, showing a survey on sexual orientation and gender identity." class="multiple-images__image"> </picture></div> </div> </figure> </li> <li class="multiple-images__item"> <figure> <div class="multiple-images__image-wrapper"> <div class="js-expandable-image" data-fullscreen-desktop="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-2.png" data-fullscreen-mobile="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-2.png"><picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-2.png, https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-2.png 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-2.png, https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-2.png 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2022/06/novant-health-crop-2.png" alt="Screenshot of code on the Novant health Portal, highlighting a line that says "Gay: men who are attracted to men"" class="multiple-images__image"> </picture></div> </div> </figure> </li> </ol> <div class="multiple-images__caption"> <i><span style="font-weight: 400;">The Markup found that filling out a survey through Novant Health shared sensitive information like sexual orientation with Facebook via the Meta Pixel. </span></i><i><span style="font-weight: 400;">Source: www.novantmychart.org</span></i> </div> <div class="multiple-images__credit"> <span class="visually-hidden">Credit:</span> www.novantmychart.org, www.novanthealth.org </div> </div> <p>“Almost any patient would be shocked to find out that Facebook is being provided an easy way to associate their prescriptions with their name,” said Glenn Cohen, faculty director of Harvard Law School’s Petrie-Flom Center for Health Law Policy, Biotechnology, and Bioethics. “Even if perhaps there’s something in the legal architecture that permits this to be lawful, it’s totally outside the expectations of what patients think the health privacy laws are doing for them.”</p> <div class="heading heading--level2 "> <a href="#legal-implications" class="heading__link">↩︎ link</a> <h2 id="legal-implications" class="heading__text">Legal Implications</h2> </div> <p>Facebook’s data collection on hospital websites has been the subject of class action lawsuits in several states, with mixed results. </p> <p>Those cases involve types of data that health law experts said are sensitive but less regulated than the health information The Markup documented the Meta Pixel collecting.</p> <p>In 2016, a group of plaintiffs <a href="https://www.documentcloud.org/documents/22037870-smith-v-facebook-complaint?responsive=1&title=1" target="_blank">sued Facebook</a> and a handful of health systems and organizations, alleging that the organizations had breached their own privacy policies and several state and federal laws—including wiretapping and intrusion on seclusion statutes—by collecting data via tracking technology on the health care providers’ websites.</p> <p>The U.S. District Court for the Northern District of California <a href="https://www.documentcloud.org/documents/22037871-smith-v-facebook-order-on-motion-to-dismiss?responsive=1&title=1" target="_blank">dismissed that case</a> in 2017 for a variety of reasons, including that the plaintiffs failed to prove that Facebook had collected “protected health information,” as defined by HIPAA. Rather, the court found, Facebook had tracked plaintiffs on public-facing pages of the websites—such as the homepage or informational pages about diseases—where there was no evidence that the plaintiffs had established a patient relationship with the provider.</p> <p>In 2019, plaintiffs brought a <a href="https://www.documentcloud.org/documents/22037876-partners-civil-complaint?responsive=1&title=1" target="_blank">similar class action lawsuit</a> in Suffolk County Superior Court against Massachusetts-based Partners Healthcare System, which has since changed its name to Mass General Brigham, alleging that the system had violated patients’ privacy and its own policies by installing the Meta Pixel and other tracking tools on its websites.</p> <div id="block13" class="promotion print-hidden js-promotion promotion--donate promotion--right " data-promotion="donate-report-deeply-and-fix-things-2-202108b"> <div class="promotion__inner" data-href="/donate-202109b"> <h2 class="promotion__heading"><a href="/donate-202109b" class="promotion__link js-promotion-link">Report Deeply and Fix Things</a></h2> <div class="promotion__content"> <p class="promotion__description"><p>Because it turns out moving fast and breaking things broke some super important things.</p> </p> <a href="/donate-202109b" class="button button--important js-promotion-link"> <span class='button__label button__label--main'> Give Now </span></a> </div> </div> </div> <p>The parties <a href="https://angeion-public.s3.amazonaws.com/www.MAcookiesettlement.com/docs/Long+Form+Notice_Final.pdf" target="_blank">settled the case</a> in January, with Mass General Brigham denying the allegations and admitting no wrongdoing or liability but paying $18.4 million to the plaintiffs and their attorneys. After the settlement, Mass General Brigham appears to have removed Meta Pixel and other tracking tools from many of its hospitals’ websites—but not all of them.</p> <p>When The Markup tested the website of Brigham and Women’s Faulkner Hospital, clicking the “Request Appointment” button on a doctor’s page caused the Meta Pixel to send Facebook the text of the button, the doctor’s name, and the doctor’s field of medicine. Mass General did not respond to The Markup’s request for comment. </p> <p>As with all such data we found the Meta Pixel collecting, it was sent to Facebook along with our computer’s public IP address.</p> <p>“When an individual has sought out a provider and indicated that they want to make an appointment, at that point, any individually identifiable health information that they’ve provided in this session, in the past, or certainly in the future, is protected under HIPAA and could not be shared with a third party like Facebook,” Holtzman said.</p> <p>The U.S. Department of Human Services’ Office for Civil Rights “cannot comment on open or potential investigations,” spokesperson Rachel Seeger wrote in an emailed statement.</p> <p>“Generally, HIPAA covered entities and business associates should not be sharing identifiable information with social media companies unless they have HIPAA authorization [from the individual] and consent under state law,” said Iliana Peters, a privacy lawyer with the firm Polsinelli who previously headed HIPAA enforcement for the Office for Civil Rights.</p> <p>Patients have the right to file HIPAA complaints with their medical providers, who are required to investigate the complaints, Peters said, adding, “I would hope that institutions would respond quickly to those types of complaints so that they aren’t escalated to a state or federal regulator.”</p> <div class="heading heading--level2 "> <a href="#plausible-deniability" class="heading__link">↩︎ link</a> <h2 id="plausible-deniability" class="heading__text">"Plausible Deniability"</h2> </div> <p>Most of the hospitals The Markup contacted for this story did not respond to our questions or explain why they chose to install Meta Pixel on their websites. But some did defend their use of the tracker.</p> <p>“The use of this type of code was vetted,” wrote Chris King, a spokesperson for Northwestern Memorial Hospital, in Chicago. King did not respond to follow-up questions about the vetting process.</p> <p>King said that no protected health information is hosted on or accessible through Northwestern Memorial’s website and that “Facebook automatically recognizes anything that might be close to personal information and does not store this data.”</p> <p>In fact, Meta explicitly states in its <a href="https://www.facebook.com/legal/technology_terms" target="_blank">business tools terms of service</a> that the pixel and other trackers do collect personally identifiable information for a variety of purposes.</p> <p>Houston Methodist Hospital, in Texas, was the only institution to provide detailed responses to The Markup’s questions. The hospital began using the pixel in 2017, spokesperson Stefanie Asin wrote, and is “confident” in Facebook’s safeguards and that the data being shared isn’t protected health information.</p> <p>When The Markup tested Houston Methodist’s website, clicking the “Schedule Appointment” button on a doctor’s page prompted the Meta Pixel to send Facebook the text of the button, the name of the doctor, and the search term we used to find the doctor: “Home abortion.”</p> <p>Houston Methodist doesn’t categorize that data as protected health information, Asin wrote, because a person who clicks the “Schedule Appointment” button may not follow through and confirm the appointment, or, they may be booking the appointment for a family member rather than for themself.</p> <figure class="wp-block-pullquote alignleft"><blockquote><p>Since our further examination of the topic is ongoing, we elected to remove the pixel for now to be sure we are doing everything we can to protect our patients’ privacy while we are evaluating.</p><cite>Stefanie Asin, Houston Methodist Hospital spokesperson</cite></blockquote></figure> <p>“The click doesn’t mean they scheduled,” she wrote. “It’s also worth noting that people often are exploring for a spouse, friend, elderly parent.”</p> <p>Asin added that Houston Methodist believes Facebook “uses tools to detect and reject any health information, providing a barrier that prevents passage of [protected health information].” </p> <p>Despite defending its use of the Meta Pixel, Houston Methodist Hospital removed the pixel from its website several days after responding to The Markup’s questions. </p> <p>“Since our further examination of the topic is ongoing, we elected to remove the pixel for now to be sure we are doing everything we can to protect our patients’ privacy while we are evaluating,” Asin wrote in a follow-up email.</p> <p>Facebook did not launch its sensitive health data filtering system until July 2020, three years after Houston Methodist began using the pixel, according to the New York Department of Financial Services’ investigation. And as recently as February of last year, the department reported that the system’s accuracy was poor.</p> <p>That type of Band-Aid fix is a prime example, privacy advocates say, of the online advertising industry’s inability to police itself.</p> <p>“The evil genius of Facebook’s system is they create this little piece of code that does the snooping for them and then they just put it out into the universe and Facebook can try to claim plausible deniability,” said Alan Butler, executive director of the Electronic Privacy Information Center. “The fact that this is out there in the wild on the websites of hospitals is evidence of how broken the rules are.”</p> <hr class="wp-block-separator has-css-opacity"> <p><em>This article was copublished with STAT, a national publication that delivers trusted and authoritative journalism about health, medicine, and the life sciences. Sign up for their health tech newsletter, delivered Tuesday and Thursday mornings, here: <a rel="noreferrer noopener" href="https://www.statnews.com/signup/health-tech/" target="_blank">https://www.statnews.com/signup/health-tech/</a></em></p> <div class="correction-update "> <div class="correction-update__content"> <h3 class="correction-update__heading">Update, June 16, 2022</h3> <div class="correction-update__body"> <p>After the publication of this story, Duke Health told The Markup that it had removed the Meta Pixel from its website.</p> <p>Duke Health spokesperson Sarah Avery said, “Duke Health is committed to protecting the privacy of health information of our patients. Upon investigation of the issue raised in the report that appeared this morning, we have removed the MetaPixel image.”</p> </div> </div> </div> <div class="correction-update "> <div class="correction-update__content"> <h3 class="correction-update__heading">Update, July 19, 2023</h3> <div class="correction-update__body"> <p>This article has been updated to include a link to our data on GitHub.</p> </div> </div> </div></div> <div class="article-donate js-promotion print-hidden"> <div class="article-donate__content"><div class='article-donate__body'><a href="/donate-footer"> <figure class="article-donate__visual"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2023/12/650x150-email-2.png, https://mrkp-static-production.themarkup.org/uploads/2023/12/650x150-email-2.png 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2023/12/650x150-email-2.png, https://mrkp-static-production.themarkup.org/uploads/2023/12/650x150-email-2.png 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2023/12/650x150-email-2.png" alt="We don't only investigate technology. We instigate change." class=""> </picture> </figure> </a><p>Your donations power our award-winning reporting and our tools. Together we can do more. Give now.</p> <a href="/donate-footer" class="button button--important "> <span class='button__label button__label--main'> Donate Now </span></a> </div> </div> </div> <footer class="article-footer print-hidden"> <div class="article-footer-titles"> <h2 class="article-footer-titles__overline">You just read</h2> <p class="article-footer-titles__title">Facebook Is Receiving Sensitive Medical Information from Hospital Websites</p><p class="article-footer-titles__series">From the series — <a href="/series/pixel-hunt">Pixel Hunt</a>, <a href="/series/impact">Impact</a>, and <a href="/series/investigations">Investigations</a></p><div class="article-footer-titles__share"> <h2 class='article-footer-titles__overline'>Share This Article</h2> <a class="button js-CopyLink"> <span class='button__label button__label--main'> Copy Link </span></a> <a class="button js-open-republisher"> <span class='button__label button__label--main'> Republish </span></a> </div> </div> <div id="credits" class="article-footer__details print-hidden"> <h3 class="article-details__overline">Credits</h3> <div class="article-authors"> <ul class="article__author-list"> <li class="article__author-list-item"> <div class='article__author-headshot'> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2021/02/FeathersProfile_markup-60x60.jpg, https://mrkp-static-production.themarkup.org/uploads/2021/02/FeathersProfile_markup-120x120.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2021/02/FeathersProfile_markup-120x120.jpg, https://mrkp-static-production.themarkup.org/uploads/2021/02/FeathersProfile_markup-240x240.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2021/02/FeathersProfile_markup-60x60.jpg" alt="Headshot, Todd Feathers" class="article__author-image"> </picture> </div> <p class="article__author-description"> <a href="https://themarkup.org/people/todd-feathers/" class="article__author-link">Todd Feathers</a> <span class='article__author-non-link'>Enterprise Reporter</span> </p> </li><li class="article__author-list-item"> <div class='article__author-headshot'> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2020/02/0020_Simon-60x60.jpg, https://mrkp-static-production.themarkup.org/uploads/2020/02/0020_Simon-120x120.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2020/02/0020_Simon-120x120.jpg, https://mrkp-static-production.themarkup.org/uploads/2020/02/0020_Simon-240x240.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2020/02/0020_Simon-60x60.jpg" alt="" class="article__author-image"> </picture> </div> <p class="article__author-description"> <a href="https://themarkup.org/people/simon-fondrie-teitler/" class="article__author-link">Simon Fondrie-Teitler</a> <span class='article__author-non-link'>Infrastructure Engineer </span> </p> </li><li class="article__author-list-item"> <div class='article__author-headshot'> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2021/01/Angie-60x60.jpeg, https://mrkp-static-production.themarkup.org/uploads/2021/01/Angie-120x120.jpeg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2021/01/Angie-120x120.jpeg, https://mrkp-static-production.themarkup.org/uploads/2021/01/Angie-240x240.jpeg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2021/01/Angie-60x60.jpeg" alt="Headshot of Angie Waller" class="article__author-image"> </picture> </div> <p class="article__author-description"> <a href="https://themarkup.org/people/angie-waller/" class="article__author-link">Angie Waller</a> <span class='article__author-non-link'>Research Manager, Special Projects</span> </p> </li><li class="article__author-list-item"> <div class='article__author-headshot'> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2020/02/0009_Surya-60x60.jpg, https://mrkp-static-production.themarkup.org/uploads/2020/02/0009_Surya-120x120.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2020/02/0009_Surya-120x120.jpg, https://mrkp-static-production.themarkup.org/uploads/2020/02/0009_Surya-240x240.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2020/02/0009_Surya-60x60.jpg" alt="" class="article__author-image"> </picture> </div> <p class="article__author-description"> <a href="https://themarkup.org/people/surya-mattu/" class="article__author-link">Surya Mattu</a> <span class='article__author-non-link'>Senior Data Engineer and Investigative Data Journalist</span> </p> </li> </ul> <div class='article__credits'> <div class='article__credits-section'> <h3 class="article-details__overline">Data Engineer</h3> <ul class="article__credits-list"> <li class="article__credits-list-item article__author-description"> <a href="/people/micha-gorelick" class="article__author-link">Micha Gorelick</a> </li> </ul> </div> <div class='article__credits-section'> <h3 class="article-details__overline">Design/Graphics</h3> <ul class="article__credits-list"> <li class="article__credits-list-item article__author-description"> <a href="/people/gabe-hongsdusit" class="article__author-link">Gabriel Hongsdusit</a> </li> </ul> </div> <div class='article__credits-section'> <h3 class="article-details__overline">Copy Editor/Producer</h3> <ul class="article__credits-list"> <li class="article__credits-list-item article__author-description"> <a href="/people/jill-jaroff" class="article__author-link">Jill Jaroff</a> </li> </ul> </div> <div class='article__credits-section'> <h3 class="article-details__overline">Editor</h3> <ul class="article__credits-list"> <li class="article__credits-list-item article__author-description"> <a href="/people/rina-palta" class="article__author-link">Rina Palta</a> </li> </ul> </div> <div class='article__credits-section'> <h3 class="article-details__overline">Audience</h3> <ul class="article__credits-list"> <li class="article__credits-list-item article__author-description"> <a href="/people/maria-puertas" class="article__author-link">Maria Puertas</a> </li> </ul> </div> <div class='article__credits-section'> <h3 class="article-details__overline">Study Partner</h3> <ul class="article__credits-list"> <li class="article__credits-list-item article__author-description"> <a href="https://rally.mozilla.org/about-rally/?utm_source=markupweb" class="article__author-link">Mozilla Rally</a> </li> </ul> </div> </div> </div> </div> </footer> </div> </article> <section id="republisher" class="republish-section" data-id="44821" aria-hidden="true"> <div class='republish-button-wrapper'> <a class="button button--navy republish-button js-close-republisher"> <span class='button__label button__label--main'> Close </span></a> </div> <div class="republish-inner"> <div class="republish-details"> <div class='republish-overline'>Republish</div> <h2 class="republish-heading"> Facebook Is Receiving Sensitive Medical Information from Hospital Websites </h2> <div class="republish-instructions"> <p>We’re happy to make this story available to republish for free under the conditions of an <a href="https://creativecommons.org/licenses/by-nc-nd/4.0/">Attribution–NonCommercial–No Derivatives Creative Commons</a> license. Please adhere to the following:</p> <ul> <li><strong>Notify us:</strong> Please email us at <a href="mailto:republish@themarkup.org">republish@themarkup.org</a> to let us know if you’ve republished the story.</li> <li><strong>Give prominent credit to The Markup and its journalists</strong>: Credit our authors at the top of the article and any other byline areas of your publication.</li> <li><strong>Do not edit the article:</strong> The complete, unaltered article text must be published. If you wish to translate the article, please contact us for approval.</li> <li><strong>Access to the article must remain free:</strong> Do not sell access to this article or place it behind a paywall, but you can republish our articles on sites with ads.</li> <li><strong>Images may not be available for republication:</strong> Not all of the imagery used in articles published on our site are licensed under Creative Commons. Some images are from commercial providers who do not allow their images to be republished without permission or payment. If you wish to use any image from our articles, email us at <a href="mailto:republish@themarkup.org">republish@themarkup.org</a> for guidance.</li> <li><strong>Use the provided HTML to republish this article on your site:</strong> Simply copy the HTML that we have provided and publish it as is on your website. The provided HTML snippet includes all text formatting and hyperlinks, the author byline, and credit to The Markup. If the HTML code for The Markup credit image is incompatible with your CMS, let us know if you remove it.</li> </ul> </div> </div> <div class="republish-content"> <div class="republish-content-inner"> <textarea class="republish-markup" id="republisher-markup" readonly resize="false">Some placeholder text</textarea> </div> <a class="button button--navy republish-copy-button js-copy-republishing"> <span class='button__label button__label--main'> Copy HTML </span></a> </div> </div> </section> <section class="article-recirc print-hidden"> <div class='section-label section-label--center '> <h2 class='section-label__text'>The Latest</h2> </div> <div class="article-recirc__list article-cards--3up"> <article class="article-card article-card--has-image " > <a href="https://themarkup.org/investigations/2025/02/13/dating-app-tinder-hinge-cover-up" class="article-card__link"> <div class="article-card__art"> <figure class="article-card__figure"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2025/02/DatingAppCoverUp_LeadFinal_reduced-360x203.jpg, https://mrkp-static-production.themarkup.org/uploads/2025/02/DatingAppCoverUp_LeadFinal_reduced-750x422.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2025/02/DatingAppCoverUp_LeadFinal_reduced-750x422.jpg, https://mrkp-static-production.themarkup.org/uploads/2025/02/DatingAppCoverUp_LeadFinal_reduced-1140x641.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2025/02/DatingAppCoverUp_LeadFinal_reduced-360x203.jpg" alt="Illustration of a woman's hand holding a phone, swiping through a dating profile. The next profile glows red, while a grid in the background connects the phone to both red and white profiles" class="article-card__img"> </picture> </figure> </div> <div class="article-card__content"> <div class="article-card__content-inner "> <p class="article-card-type"></p> <h3 class="article-card__headline "> Dating App Cover-Up: How Tinder, Hinge, and Their Corporate Owner Keep Rape Under Wraps </h3><p class="article-card__subhead">The company behind more than a dozen dating apps, Match Group, has known for years about the abusive users on its platforms, but chooses to leave millions of people in the dark</p><time class="article-card__date" datetime="2025-02-13T05:00:00">February 13, 2025 05:00 ET</time></div> </div> </a> </article> <article class="article-card article-card--has-image " > <a href="https://themarkup.org/artificial-intelligence/2025/01/23/openai-investigation-california" class="article-card__link"> <div class="article-card__art"> <figure class="article-card__figure"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2025/01/092623_Newsom-Gun-Bill-Signing_MG_CM_01-360x203.jpg, https://mrkp-static-production.themarkup.org/uploads/2025/01/092623_Newsom-Gun-Bill-Signing_MG_CM_01-750x422.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2025/01/092623_Newsom-Gun-Bill-Signing_MG_CM_01-750x422.jpg, https://mrkp-static-production.themarkup.org/uploads/2025/01/092623_Newsom-Gun-Bill-Signing_MG_CM_01-1140x641.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2025/01/092623_Newsom-Gun-Bill-Signing_MG_CM_01-360x203.jpg" alt="" class="article-card__img"> </picture> </figure> </div> <div class="article-card__content"> <div class="article-card__content-inner "> <p class="article-card-type"><span class="article-card-type__series">Artificial Intelligence</span></p> <h3 class="article-card__headline "> California Is Investigating OpenAI’s Conversion To a For-Profit Company </h3><p class="article-card__subhead">The state’s attorney general asked the company how it plans to transfer assets out of its charitable nonprofit</p><time class="article-card__date" datetime="2025-01-23T08:30:00">January 23, 2025 08:30 ET</time></div> </div> </a> </article> <article class="article-card article-card--has-image " > <a href="https://themarkup.org/artificial-intelligence/2025/01/16/fearing-ai-will-take-their-jobs-workers-plan-a-long-battle-against-tech" class="article-card__link"> <div class="article-card__art"> <figure class="article-card__figure"> <picture> <source media="(min-width: 491px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2025/01/091824_Dreamforce_FM_MU_22-360x203.jpg, https://mrkp-static-production.themarkup.org/uploads/2025/01/091824_Dreamforce_FM_MU_22-750x422.jpg 2x"> <source media="(max-width: 490px)" srcset="https://mrkp-static-production.themarkup.org/uploads/2025/01/091824_Dreamforce_FM_MU_22-750x422.jpg, https://mrkp-static-production.themarkup.org/uploads/2025/01/091824_Dreamforce_FM_MU_22-1140x641.jpg 3x"> <img src="https://mrkp-static-production.themarkup.org/uploads/2025/01/091824_Dreamforce_FM_MU_22-360x203.jpg" alt="A close-up view of people's hands typing or scrolling on their laptops at an event." class="article-card__img"> </picture> </figure> </div> <div class="article-card__content"> <div class="article-card__content-inner "> <p class="article-card-type"><span class="article-card-type__series">Artificial Intelligence</span></p> <h3 class="article-card__headline "> Fearing AI Will Take Their Jobs, Workers Plan a Long Battle Against Tech </h3><p class="article-card__subhead">At a landmark gathering in California, workers discussed defenses against artificial intelligence and surveillance technology</p><time class="article-card__date" datetime="2025-01-16T09:15:00">January 16, 2025 09:15 ET</time></div> </div> </a> </article> </div> </section> </div> <footer class="site-footer js-Footer" role="region" aria-label="footer"> <div class="site-footer-inner"> <a href='/' class='footer-logo'> <span class="visually-hidden">Return to The Markup's homepage</span> <svg aria-hidden="true"><use xlink:href="#markup-logo"></use></svg> </a> <div class='footer-donate'> <p class='footer-donate__description'> Your contributions help us investigate how technology influences our society. </p> <div class='footer-donate__arrow'></div> <a href="/donate" class="button button--navy "> <span class='button__label button__label--main'> Donate </span></a> </div> <div class="footer-list footer-list--information"> <ul class="footer-nav"> <li class="footer-nav__item"> <a href="/about" class="footer-nav__link">About Us</a> </li> <li class="footer-nav__item"> <a href="/donors" class="footer-nav__link">Our Donors</a> </li> <li class="footer-nav__item"> <a href="/ethics" class="footer-nav__link">Ethics Policy</a> </li> <li class="footer-nav__item"> <a href="/events/" class="footer-nav__link">Events</a> </li> <li class="footer-nav__item"> <a href="/board-of-directors" class="footer-nav__link">Board of Directors</a> </li> <li class="footer-nav__item"> <a href="https://themarkup.org/jobs" class="footer-nav__link">Jobs</a> </li> <li class="footer-nav__item"> <a href="/team" class="footer-nav__link">Team</a> </li> <li class="footer-nav__item"> <a href="/tips" class="footer-nav__link">Have a Tip?</a> </li> <li class="footer-nav__item"> <a href="/newsletter" class="footer-nav__link">Newsletters</a> </li> <li class="footer-nav__item"> <a href="/2020/02/25/president-letter-nabiha-syed" class="footer-nav__link">A Letter from the President</a> </li> <li class="footer-nav__item"> <a href="/awards" class="footer-nav__link">Awards</a> </li> <li class="footer-nav__item"> <a href="/privacy" class="footer-nav__link">Privacy Policy</a> </li> <li class="footer-nav__item"> <a href="/terms" class="footer-nav__link">Terms of Use</a> </li> </ul> </div> <nav class="footer-list footer-list--follow" aria-label="Social media"> <ul class='footer-nav'> <li class="footer-nav__item"> <a href="https://www.facebook.com/teammarkup/" class="footer-nav__link footer-nav__link--facebook"> <svg><use xlink:href="#icon-facebook"></use></svg> Facebook</a> </li> <li class="footer-nav__item"> <a href="https://twitter.com/themarkup" class="footer-nav__link footer-nav__link--twitter"> <svg><use xlink:href="#icon-twitter"></use></svg> Twitter</a> </li> <li class="footer-nav__item"> <a href="https://www.instagram.com/the.markup/" class="footer-nav__link footer-nav__link--instagram"> <svg><use xlink:href="#icon-instagram"></use></svg> Instagram</a> </li> <li class="footer-nav__item"> <a href="https://mastodon.themarkup.org/@themarkup" class="footer-nav__link footer-nav__link--mastodon" rel="me"> <svg><use xlink:href="#icon-mastodon"></use></svg> Mastodon</a> </li> <li class="footer-nav__item"> <a href="https://themarkup.org/feeds/rss.xml" class="footer-nav__link footer-nav__link--rss-feed"> <svg><use xlink:href="#icon-rss-feed"></use></svg> RSS Feed</a> </li> </ul> </nav> </div> </footer> <script src="https://mrkp-static-production.themarkup.org/static/dist/main.2bee9d74.js"></script> </body> </html>

CINXE.COM

Facebook Is Receiving Sensitive Medical Information from Hospital Websites – The Markup