The policy states that Oscar uses third-party advertising cookies and related technologies to share identifying information and online activity with advertising partners for interest-based advertising, and that ad technology companies may track users across multiple websites over time. The policy explicitly states this advertising activity does not involve Protected Health Information.
This analysis describes what Oscar Health's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that cross-site behavioral tracking and sharing of online activity with advertising partners occurs through Oscar's Sites; the policy provides an opt-out mechanism via the 'Your Privacy Choices' footer link and states that GPC signals are processed, though it acknowledges GPC technology is not fully developed and not supported by all browsers.
Under this provision, identifying information and online activity from Oscar's Sites may be shared with advertising partners who track users across multiple websites to build interest-based profiles. Users may opt out by selecting 'Your Privacy Choices' in the site footer, toggling off Targeting Cookies, and confirming choices; this process must be repeated on each browser and device.
Cross-platform context
See how other platforms handle Third-Party Advertising Cookies and Cross-Site Tracking and similar clauses.
Compare across platforms →"We may use certain cookies known as third-party advertising cookies or 'Targeting Cookies' as well as other advertising techniques (that do not involve Protected Health Information) to share limited identifying information including Online User Activity with advertising partners to provide you with advertising about products and services tailored to your interests. You may see our ads on other websites or mobile apps through this technique, since it enables us to target our messaging to users considering demographic data, users' inferred interests and browsing context. In similar fashion, ad technology companies track users' online activities over time by collecting information through automated means, including through the use of cookies, web server logs, web beacons and other similar technologies.Excerpt from Oscar Health's Privacy Policy
1) REGULATORY LANDSCAPE: This provision implicates CCPA and CPRA opt-out of sale or sharing requirements, the FTC Act's authority over unfair or deceptive advertising practices, and state consumer privacy statutes in the approximately eighteen additional …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that cross-site behavioral tracking and sharing of online activity with advertising partners occurs through Oscar's Sites; the policy provides an opt-out mechanism via the 'Your Privacy Choices' footer link and states that GPC signals are processed, though it acknowledges GPC technology is not fully developed and not supported by all browsers.
Under this provision, identifying information and online activity from Oscar's Sites may be shared with advertising partners who track users across multiple websites to build interest-based profiles. Users may opt out by selecting 'Your Privacy Choices' in the site footer, toggling off Targeting Cookies, and confirming choices; this process must be repeated on each browser and device.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Oscar Health.