“And two thirds of hospital websites had some kind of data transfer to a third-party domain that we couldn’t even identify”
Penn researchers checked 100 acute care hospital homepages and found 96 of them sending visitor data to third parties. Google sits on nearly every page and Meta’s pixel on over half. Only 71 had a privacy policy, and only 56 percent of those named who gets the data. Hospitals aren’t legally required to publish a website privacy policy at all. The one place you go when you’re sick is feeding ad brokers before you reach the front desk.