Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 20, 2026; our capture on Oct 15, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is Teladoc Health's General Privacy Policy covering data collected from visitors to its public websites, including Teladochealth.com and MyStrength.com, but not from logged-in members whose data is governed by HIPAA. The policy states that Teladoc may collect identifiers, browsing activity, device information, registration form data (including date of birth and health plan), and customer service communications, and may share this data with service providers and, with user consent, advertising partners. California residents and users in certain other states are granted rights to know, delete, correct, opt out of targeted advertising, and limit use of sensitive personal information, exercisable through a webform or by emailing PrivacyRights@teladochealth.com.
This General Privacy Policy governs Teladoc Health's collection, use, and disclosure of Personal Information from visitors to its public websites (Teladochealth.com and MyStrength.com), effective March 9, 2026, and explicitly states it is not a contract. The policy states that Teladoc may collect visitor data (pages visited, device and browser type, IP address, email address, and external/internal identifiers), registration data (name, date of birth, health plan, contact information), and customer service communications, and may share this data with service providers, advertising partners (with consent), law enforcement, and successors in business transactions. The policy draws a material distinction between public website data governed by this policy and Protected Health Information (PHI) collected on secure platforms, which is governed by HIPAA and a separate HIPAA Notice of Privacy Practices; the policy also states that Teladoc does not sell PHI or use it for advertising or data mining, and that opt-in advertising cookies may constitute a 'sale' of personal information under state law definitions including CCPA/CPRA. The policy engages HIPAA via HHS OCR, the CCPA and CPRA via the California Attorney General and the California Privacy Protection Agency, and potentially state consumer health data laws through a supplemental Consumer Health Data Privacy Policy referenced but not reproduced in this document. Compliance teams should note the policy's acknowledgment that GPC signals are honored, that advertising cookie opt-in may trigger state-law 'sale' classification, and that the boundary between public-site personal data and PHI requires careful operational mapping, particularly where registration activity or health-adjacent data collected on public pages may fall under CMIA, HIPAA, or state consumer health data statutes depending on jurisdiction.
The agreement establishes that personal information collected on Teladoc's public websites, including identifiers, browsing activity, registration form data, and customer service communications, may be shared with service providers, advertising partners (where consent is given), law enforcement, and business successors. Under these terms, users in California and certain other states may request access, correction, deletion, and opt-out of targeted advertising through a webform or by email, and the policy states Teladoc honors Global Privacy Control signals to reject non-essential cookies automatically. You can manage cookie preferences at any time by clicking 'Your Privacy Choices' in the website footer, submit a privacy rights request via the webform linked in the policy, or email PrivacyRights@teladochealth.com.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“If you opt-in/consent to our use of advertising cookies and similar technologies, the use may be considered a "sale" of personal information under specific state consumer privacy law (including in California).”
“If you provide explicit opt-in consent, some cookies and similar technologies may collect Visitor Data that may reveal consumer health data.”
“Teladoc Health does not use location data required for device syncing for targeted advertising.”
“Teladoc does not use, disclose, or sell this data for advertising or data mining and does not combine it with other data.”
“All Information collected and stored by Teladoc or added by our Members into such Secure Platforms is considered Protected Health Information ("PHI") and/or medical information...”
“Our privacy policies explain our privacy practices; they do not create any contractual rights or obligations.”
“no method of transmission or storage is completely secure, and we cannot guarantee absolute security.”
“We recognize and honor the Global Privacy Control (GPC) opt-out signal. When we detect the noted opt-out signal, we automatically apply your preference to reject non-essential cookies...”
“We may share the information with Third Parties, if you opt-in/consent to advertising and cookies.”
“we may use automated tools, including artificial intelligence technologies. These tools may assist with functions such as analytics, quality improvement, administrative activities, and system management...”
“Information you provide through our Websites may be stored, processed, and accessed in the United States or other countries that may not provide the same level of data protection as your place of residence.”
“We may disclose your name, email, date of birth, phone number, and address if you provided it to us via a form on the website during an incomplete or failed registration to Service Providers”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Activity disclosed to ad partners with consent and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.