Provision record
Ro · Ro Privacy Policy · View original document ↗

Sensitive Health Data Used for Targeted Advertising

High severity Medium confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Ro and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The policy discloses that Ro may use sensitive personal information including health treatment history, sexual orientation, and information about sex life to deliver targeted advertising, and that users have the right to opt out of this use by visiting the 'Your Privacy Choices' page.

ⓘ

This analysis describes what Ro's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision authorizes processing of health and sexual orientation data for advertising purposes, which may require opt-in consent rather than opt-out under certain state privacy laws including CPRA. The policy explicitly acknowledges that Ro does not use sensitive personal information for tailored advertising in Maryland, Washington, or Nevada, indicating that applicable law in those states constrains this practice.

⚠

Interpretive note: Whether the opt-out framework satisfies applicable state law opt-in requirements for sensitive data depends on jurisdictional enforcement interpretation, particularly under CPRA and analogous state statutes.

Recent Activity

This document changed recently

Medium Sep 4, 2026

The updated policy establishes that Ro has enabled contractual settings with certain advertising partners that restrict those partners' use of data to service provision only, meaning those partners may not use the information for their own advertising or profiling purposes. The policy also expands the list of states where Ro does not sell sensitive personal information for tailored advertising, adding New Jersey, New Hampshire, Nebraska, Iowa, and Delaware. For residents of the newly added states and others covered by partner settings, default restrictions on data use may apply even without an explicit opt-out. You can manage advertising preferences through the policy's stated opt-out mechanisms, including the 'Your Privacy Choices' page and Global Privacy Control signals.

View change record →

Consumer impact (what this means for users)

Under these terms, information about treatments you have requested or received, your sexual orientation, and related health information may be used to deliver targeted advertising to you and shared with Ro's advertising partners, unless you opt out via ro.co/do-not-sell/ or the Global Privacy Control. The agreement states that opting out means advertising may still be shown but will not be targeted based on this sensitive information.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Visit ro.co/do-not-sell/ and follow the opt-out process for sensitive data advertising. You must repeat this on each browser and device you use.

Cross-platform context

See how other platforms handle Sensitive Health Data Used for Targeted Advertising and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
To provide you with more relevant online advertising regarding Ro's products and services, as described immediately above, we may use information about the treatments you have requested or received and similar information. This may include the processing of information that is considered 'sensitive data' or 'sensitive personal information' under applicable laws, such as health information and information about sex life and sexual orientation (collectively referred to herein as 'sensitive data'). You have a right to limit or opt out of our use of sensitive data for purposes other than to provide the services or goods you request or as otherwise permitted by law, including our and our partner's processing of sensitive data for tailored advertising purposes.

Excerpt from Ro's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

REGULATORY LANDSCAPE: This provision implicates the California Consumer Privacy Act as amended by CPRA, which requires opt-in consent for use of sensitive personal information beyond defined permitted purposes; the Texas Data Privacy and Security Act …

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →
  • Department Of Health & Human Services, Office For Civil Rights (hhs Ocr)
    Enforces HIPAA Privacy and Security Rules, which protect health information held by healthcare providers, health plans, and their business associates.
    Who can file: Anyone whose HIPAA rights may have been violated by a covered entity (healthcare provider, health plan, or healthcare clearinghouse)
    What you need: Name of the entity, description of the violation, date of the incident, and your contact information. Must file within 180 days of the violation.
    What to expect: HHS OCR investigates and may require the entity to take corrective action. Does not provide individual compensation. Serious violations can result in civil monetary penalties.
    File a complaint →

Provision details

Document information
Document
Ro Privacy Policy
Entity
Ro
Document last updated
July 5, 2026
Tracking information
First tracked
July 5, 2026
Last verified
July 9, 2026
Record ID
CA-P-015423
Document ID
CA-D-00905
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
fd8e38702aa47447615a3625653591159b0e77ea6255a1ce4be0d067ec9913a4
Analysis generated
July 5, 2026 02:19 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Ro
Document: Ro Privacy Policy
Record ID: CA-P-015423
Captured: 2026-07-05 02:19:53 UTC
SHA-256: fd8e38702aa47447…
URL: https://conductatlas.com/platform/ro/ro-privacy-policy/provision/CA-P-015423/sensitive-health-data-used-for-targeted-advertising/
Accessed: Oct. 3, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Ro's Sensitive Health Data Used for Targeted Advertising clause do?

This provision authorizes processing of health and sexual orientation data for advertising purposes, which may require opt-in consent rather than opt-out under certain state privacy laws including CPRA. The policy explicitly acknowledges that Ro does not use sensitive personal information for tailored advertising in Maryland, Washington, or Nevada, indicating that applicable law in those states constrains this practice.

How does this clause affect you?

Under these terms, information about treatments you have requested or received, your sexual orientation, and related health information may be used to deliver targeted advertising to you and shared with Ro's advertising partners, unless you opt out via ro.co/do-not-sell/ or the Global Privacy Control. The agreement states that opting out means advertising may still be shown but will not be …

Is ConductAtlas affiliated with Ro?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ro.