Cerebral
Medical records run on two clocks, and only one of them is yours: retention law keeps the clinical file for years or decades whatever you ask. Around it, what you looked up can become an advertising interest, and a deletion request usually comes back half done.
Reported incidents
Mental health assessment answers of 3.1 million people sent to advertisers
2023-03-10Affected Website and apps (tracking pixels)
Cerebral, an online mental health service, disclosed in March 2023 that it had shared the private health information of more than 3.1 million people in the US with Google, Meta, TikTok and other third parties through tracking pixels it had used since it began operating on 12 October 2019. Its notice said the data could include names, phone numbers, email addresses, dates of birth, IP addresses and answers to its mental health self-assessment, and for subscribers, appointment dates, treatment and clinical information and insurance details. Cerebral said it found the problem on 3 January 2023 and removed or reconfigured the trackers.
People affected typically ask Cerebral to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.