Telehealth app Doxy.me is fixing a patient health data leak
Nathan E Botts
/ Categories: Privacy, Security

Telehealth app Doxy.me is fixing a patient health data leak

A report from Cyberscoop

Overview

Cyberscoop reports that after examining the Doxy.me platform, privacy researcher Zach Edwards discovered that the company appeared to be sharing IP addresses and unique device identification numbers with Google, Facebook, and the marketing software company HubSpot.

Why is this important to me?

Cyberscoop notes that users of Doxy.me may be inadvertently grouped with other patients by Google and Facebook's advertising platforms, possibly providing data to the firms' algorithms that might infer sensitive information about a patient's health. Advertisers could then target patients with adverts that were personalized to their specific ailments.

Among the third parties named in Doxy's privacy policy are Google Analytics, Facebook Ads, Google Ads, and HubSpot. According to the corporation, "use data" includes Internet Protocol address, browser type, browser version, and a mobile device's unique ID number.

The problem is that, when joined with other data, those bits may create a formidable data collection that allows some of the world's biggest advertising platforms to track individuals online.

What should I do about it?

It is noted in the CyberScoop article that, "In its privacy policy, Doxy acknowledges that it shares “usage data” with several third parties including Google Analytics, Facebook Ads, Google Ads and HubSpot. Per the company’s definition, “usage data” can include but is not limited to Internet Protocol address, browser type, browser version, and a mobile device’s unique ID number."

So while there was usage data exposed, it was not necessarily "leaked".  If you are uncomfortable about that reach out to Doxy.me and confirm the status of the identity leak and have them confirm that your data is safe and has not been exposed beyond the definition of "usage data". Letting them know that you are a concerned patient/user is a good thing! 

You can reach out to Doxy here: https://doxy.me/en/contact/

Previous Article Cyber Vitals: Information for Patients' Medical Device Health
Next Article How to Maximize Your Personal Health Data Defense
Print
1120 Rate this article:
No rating
0Upvote 0Downvote
Tags: TelehealthData LeakDoxy.me

More links

Please login or register to post comments.

All information, thought, and references provided on Health eConsultation is intended for informational and educational purposes only. Health eConsutlation currently makes no attempt at HIPAA privacy compliance. Any trade names used are information and details given for the convenience of users and do not constitute an endorsement from Health eConsultation.

Use this site at your own risk, and do not use the information to make medical or legal decisions without first seeking guidance from a medical or legal professional.

Plain and simple, ads are used to help pay for the cost of the server and resources required to serve Health eConsultation members and provide an objective resource of health information and health education. Subscribers of Health eConsultation can access the site without having to view ads.
OUR SERVICES

Health Education

We are passionate about the therapeutic benefits that can be derived from appropriately applied health education .

More informed patients are healthier and less costly to provide care to.

We seek to give consumers and patients a voice, because in the end we are them.

Evidence based practices is what nurtures a thriving health system.

HEALTH IT EDUCATION - KNOWLEDGE IS POWER

 
WHO WE ARE
Health eConsultation members believe that health improvement is about patient knowledge, motivation and opportunity to act in concert with healthcare professionals to improve their condition.
OUR PURPOSE
Our primary purpose is to build a community around unbiased Health IT education so that people are able to focus on the information they need without having to navigate the vast amount of information that is available on the web.
LEVERAGE VS BUILD
Health eConsultation seeks to leverage responsible, engaging and, hopefully, motivating education, and information resources. The idea is not to scrape the content of other sites, but to investigate, synthesize, and report in order to create an evidence-base founded on increased rigor and research.
RESOURCES & REFERENCES
Health eConsultation educational material and website information are provided primarily through free resources, although some sites mentioned might require further registration and payment for particular membership or services.
DISCLAIMER
All information, thought, and references provided on Health eConsultation is intended for informational and educational purposes only. Health eConsutlation currently makes no attempt at HIPAA privacy compliance. Use this site at your own risk, and do not use the information to make medical decisions without first seeking guidance from a medical professonal.
CUSTOMIZED LEARNING
By registering with Health eConsultation you can participate in comments, ratings, and bookmarking. You can also keep track of the time that you spend learning about certain topics for your own records or to share whith health professionals you are working with.