The Policy states that the mobile application may collect health and medical information, financial information, GPS and network-based location data, and user files including calendars, photos, and videos from users' devices, subject to device-level permission grants.
This analysis describes what UnitedHealthcare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision describes mobile data collection encompassing health information, precise location data, and personal device files, which represents a broad range of sensitive data categories collected through a mobile application associated with health insurance services. The collection of device files and location data beyond what is necessary for navigation or core health services functionality may require evaluation against applicable data minimization principles and HIPAA minimum necessary standards where health data is involved.
Under this clause, the UnitedHealthcare mobile application may access and collect GPS location, calendars, photos, and videos from users' devices when device-level permissions are granted. Users can withdraw consent to location data collection by disabling location-based features in device settings, though the Policy states this will disable associated navigation and distance functionality.
Cross-platform context
See how other platforms handle Mobile Device Health, Location, and File Access and similar clauses.
Compare across platforms →"In addition to the Information identified above, we may collect the following Information: Information that Identifies You Health, medical, therapy, or financial information; Information created by the Company; Location data such as GPS, Wi-Fi, or carrier network location (see below for more details); and User files stored on your device like calendars, photos, and videos, if you grant permission through your device settings.Excerpt from UnitedHealthcare's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision describes mobile data collection encompassing health information, precise location data, and personal device files, which represents a broad range of sensitive data categories collected through a mobile application associated with health insurance services. The collection of device files and location data beyond what is necessary for navigation or core health services functionality may require evaluation against applicable data …
Under this clause, the UnitedHealthcare mobile application may access and collect GPS location, calendars, photos, and videos from users' devices when device-level permissions are granted. Users can withdraw consent to location data collection by disabling location-based features in device settings, though the Policy states this will disable associated navigation and distance functionality.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by UnitedHealthcare.