Two Pixel Settlements, One Court Ruling, and Our New Data Export API

Two Pixel Settlements, One Court Ruling, and Our New Data Export API 📊

The one-minute read: Healthcare marketing just got a mixed bag of news. Two Indiana hospitals settled pixel lawsuits (bad), but a federal court in Pennsylvania ruled in favor of Quest Diagnostics regarding tracking (good...ish). Plus, we’re dropping a major update to help you analyze your data without the legal headaches.

Let’s dive in.

---

⚖️ The Bad News: Settlement Season in Indiana

If you’re still running client-side Meta Pixels on your patient portals, you might want to read this sitting down.

Two Indiana healthcare systems, Goshen Health and Hancock Regional Hospital, just agreed to settle class action lawsuits.

The Gist:
Both organizations had the Meta Pixel installed on their websites, including behind the login on patient portals. Patients claimed that when they viewed test results, the pixel sent metadata (URLs, page titles) to Facebook without consent.

Rather than roll the dice in court, both systems settled.

• The Payout: About $25 per patient.
• The Extras: Free dark web monitoring and "Privacy Shield Pro" for affected patients.

Why it matters: Even though both hospitals denied wrongdoing, they calculated that settling was cheaper than fighting. This reinforces a dangerous precedent for marketers. If you have standard pixels on patient-facing pages, you are a target.

---

👩‍⚖️ The Good News: A Win in the Third Circuit

While Indiana was writing checks, a federal appeals court gave marketers a rare "W."

In Cole v. Quest Diagnostics, the Third Circuit court (covering PA, NJ, DE, and the Virgin Islands) ruled that the Meta Pixel on Quest’s site did not violate California privacy laws.

The Court’s Logic:

1. No "Eavesdropping": The court said Facebook isn't "intercepting" communication like a wiretapper; the browser is sending data directly to them.
2. No "Medical Info": Simply knowing a user visited a "test results" page isn't the same as knowing the result of the test. Unless the URL explicitly says /results/positive-for-flu, it’s not necessarily a violation of California's specific medical info laws.

The Catch:
Don’t pop the champagne yet. This ruling only applies in the Third Circuit. California state courts or other federal districts could (and likely will) view this differently. It’s a narrow win, not a get-out-of-jail-free card.

---

🛡️ The Takeaway

The landscape is shifting fast. In Indiana, pixels are costing money. In Pennsylvania, they are technically legal (for now).

For healthcare marketers, the strategy remains the same: Client-side tracking is a liability.

If you want to sleep at night, you need to move to Server-Side Tracking. That’s where Curve comes in. We strip the PHI before it ever touches an ad platform, keeping you compliant regardless of which way the court winds are blowing.

---

🚀 Product Update: Unlock Your Data with Curve’s Enterprise API

Speaking of data, we know that compliance shouldn't mean flying blind. You need deep insights to drive ROAS.

We are thrilled to announce the launch of our Bulk Data Export API.

This new Enterprise feature allows you to bypass the dashboard and plug your raw, HIPAA-compliant data directly into your own tools.

What you can do with it:

• User Journey Analytics: See the full path from anonymous browsing to conversion (with retroactive email association).
• Email Attribution Mapping: Finally prove that email campaign ROI by matching click IDs (gclid, fbclid) to conversions.
• Feed Your Warehouses: Pipe clean data directly into Snowflake, BigQuery, or Redshift.
• Power Your BI: Visualize your custom metrics in Tableau, PowerBI, or Looker.

How to get it:
This is a premium feature for teams that need granular control over their analytics. If you’re ready to nerd out on data (safely), hit up your admin or email us at hey@curvecompliance.com to turn it on.

Stay compliant, stay profitable.

The Curve Team