89 Total
32 High severity
48 Medium severity
9 Low severity

Key Facts · in the document’s own words

What does Oscar Health do upon submission of a deletion request?
“If you are submitting a deletion request, your account will be permanently terminated and personal information on that account will be deleted consistent with any applicable laws.”
Version CA-V-006949, captured Sept. 15, 2026 · live source ↗
Our reading, not the document’s words
Oscar Health permanently terminates an account and deletes the personal information on that account upon submission of a deletion request, consistent with applicable laws.
What does the user acknowledge by using or accessing the Services?
“By using or accessing the Services in any manner, regardless of whether you register or create an Account, you acknowledge the terms of this Notice and those within our Terms of Service”
Version CA-V-006949, captured Sept. 15, 2026 · live source ↗
Our reading, not the document’s words
Oscar Health establishes that by using or accessing the Services in any manner, regardless of whether the user registers or creates an account, the user acknowledges the terms of the Notice and those within Oscar Health's Terms of Service.
What personal information may be 'sold' or 'shared' with third parties?
“The following information may be 'sold' or 'shared' with third parties (as such terms are defined under applicable state privacy laws) such as marketing partners, online advertising services, third party data analytics providers, social networks and/or consumer data resellers”
Version CA-V-006949, captured Sept. 15, 2026 · live source ↗
Our reading, not the document’s words
Oscar Health discloses that certain personal information may be 'sold' or 'shared' with third parties, including marketing partners, online advertising services, third-party data analytics providers, social networks, and consumer data resellers, as those terms are defined under applicable state privacy laws.
What direct and personal identifiers does Oscar Health collect?
“Direct and Personal Identifiers, such as name, email, user name and password, your mailing address, your tax identification number or social security number”
Version CA-V-006949, captured Sept. 15, 2026 · live source ↗
Our reading, not the document’s words
Oscar Health collects direct and personal identifiers, including name, email, username and password, mailing address, tax identification number, and social security number.
May Oscar Health disclose personal information to third-party ad network providers, sponsors, and traffic measurement services?
“We may disclose Personal Information to third-party ad network providers, sponsors and/or traffic measurement services. These third parties may use cookies, JavaScript, web beacons...”
Version CA-V-006949, captured Sept. 15, 2026 · live source ↗
Our reading, not the document’s words
Oscar Health may disclose personal information to third-party ad network providers, sponsors, and traffic measurement services, which may use cookies, JavaScript, and web beacons.
What supersedes Oscar Health's Privacy Notice in the event of any conflict?
“the applicable Notice of Privacy Practices will apply and supersede this Notice in the event of any conflict.”
Version CA-V-006949, captured Sept. 15, 2026 · live source ↗
Our reading, not the document’s words
Oscar Health's applicable Notice of Privacy Practices supersedes its Privacy Notice in the event of any conflict.
Stay ahead of the changes
Track Oscar Health and get the diff the day its terms change.
Summary

Oscar Health's Privacy Policy explains what personal information the company collects—including sensitive details like your Social Security number—and how it may share that information with advertising partners, analytics services, and data resellers to deliver targeted ads and marketing. Simply using Oscar Health's services, even without creating an account, means these terms apply to you. You have the right at any time to opt out of the sale or sharing of your personal information, and you can request a full accounting of what Oscar Health holds about you.

Analysis

Oscar Health's Privacy Policy establishes the terms under which Oscar Health collects, uses, retains, and shares personal information from anyone who uses or accesses its Services, with acknowledgment of the policy triggered by any use regardless of account registration. The document authorizes collection of highly sensitive identifiers—including social security numbers, tax identification numbers, and account credentials—and permits sharing of personal information with marketing partners, ad network providers, analytics providers, social networks, and data resellers, including through cookies and web beacons deployed by those third parties. Retention of personal information is open-ended, governed by Oscar Health's own assessment of necessity across legal, dispute-resolution, and safety purposes, and data deletion upon a deletion request results in permanent account termination consistent with applicable laws. The Notice of Privacy Practices supersedes this Privacy Policy in any conflict, and users hold ongoing rights to access detailed records of their personal information and to opt out of its sale or sharing with third parties, subject to service-provider and other legal exceptions.

What this means for you

This policy applies to anyone who accesses Oscar Health's services, with or without an account, and covers the collection of highly sensitive information including Social Security numbers and tax identification numbers. Oscar Health may share your personal information with a broad range of third parties—advertising networks, analytics providers, social networks, and data resellers—who may deploy their own tracking technologies. Your personal information may also be used to train or optimize Oscar Health's AI systems in de-identified or anonymized form. Oscar Health retains personal information for an open-ended period determined by its own assessment of necessity, and submitting a deletion request results in permanent, irreversible account termination. One concrete action available to you: you may opt out at any time of the sale or sharing of your personal information with third parties (excluding service providers and other law-permitted exceptions) by exercising the opt-out right described in the policy.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

2 important changes detected

4 versions captured · Latest change detected by ConductAtlas: September 2026

What changed Oscar Health changed the text of its Oscar Health Privacy Policy, which now states its date as October 28, 2025.
View full change record →
What changed Oscar Health expanded its state-specific consumer rights section to include four additional states: Alabama, Louisiana, Oklahoma, and Vermont. Previously, the policy listed 18 states where these rights applied; the updated language now covers 22 states. This means residents of those four new states now have access to the same state-specific consumer privacy rights disclosures that Oscar Health previously reserved for residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.
Why this matters The updated policy extends state-specific consumer rights disclosures to residents of Alabama, Louisiana, Oklahoma, and Vermont. Previously, Oscar Health provided these detailed disclosures only to residents of 18 other states. Residents of the four newly added states will now have access to the same privacy rights information that the policy makes available to other covered jurisdictions, including details about their rights under their respective state privacy laws. No action is required by users; the updated terms will apply automatically to new and existing residents of these states.
View full change record →

Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

89 provisions
12 featured
18 clause types
32 high severity
Targeting and Audience Restrictions 2 2 high
Disclosure and Transparency Requirements 2 1 high
Policy Changes 1 1 high
Acceptable Use Restrictions 1
Stay ahead of the changes

Monitoring

Oscar Health has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Account permanently terminated upon deletion request and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
HIPAA
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
This version captured September 15, 2026 00:45 UTC
Last successful capture October 8, 2026 00:45 UTC
Date stated by the document October 28, 2025 (as printed in this version)
Capture Method Automated scheduled archival capture
Document ID CA-D-000432
Version ID CA-V-006949
SHA-256 (extracted text, extractor v5) 74df97bdf605d8ccf9afa46e1329a3972d08ade2453f10ea7c763a069069ebe8
Archived bytes SHA-256 (anchor) 579a8695e97d1291a034319b93530323a0e38d5b1d1d75bbf37e6d5496d0a2ac
✓ Snapshot stored ✓ Archived bytes anchored (verified Sept. 15, 2026)

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans