Your Medical Appointments, Your Addiction Treatment, Your University Portal — All May Have Shared Your Data With Google
By Steve Levine
Published: March 5, 2026
Status: Active Investigations
Claim Form: Available — See Below
Potential Benefit: Compensation May Be Available
ATTORNEY ADVERTISEMENT. This content is published on behalf of Siri & Glimstad LLP. Submitting a form through any link on this page does not create an attorney-client relationship. The information on this page is for general informational purposes only and does not constitute legal advice. Prior results do not guarantee a similar outcome. Compensation is not guaranteed. Each case is evaluated on its own facts and circumstances. There are strict legal deadlines — statutes of limitations — by which you must file any potential claim; you should not delay in seeking legal counsel. Siri & Glimstad LLP represents clients in federal and state courts nationwide and may rely on co-counsel in certain jurisdictions.
What Is a Tracking Pixel, and Why Should You Care?
If you have ever booked a medical appointment online, searched for addiction treatment, or logged into a patient portal, your most sensitive personal information may have been quietly handed over to tech giants like Google, Facebook, and Microsoft — without your knowledge or consent.That is the alarming allegation at the center of a growing wave of class action investigations targeting healthcare providers, medical spas, recovery centers, and universities across the United States. The law firm Siri & Glimstad LLP is currently investigating multiple organizations — including The Skin Agency, Western Governor's University, Recovery.com, and California Prime Recovery — over claims that their websites used hidden tracking technology to intercept and transmit private user data to third-party advertising platforms.
A tracking pixel is a tiny, invisible piece of code that website owners embed into their pages. It is called a "pixel" because it is often literally the size of a single dot — invisible to the naked eye. When you visit a webpage that contains one of these pixels, the code fires automatically in the background and sends information about your visit back to whoever owns the pixel — usually a company like Google or Meta (Facebook's parent company).
In the world of online advertising, pixels are everywhere. Companies use them to track which ads you clicked, which products you viewed, and whether you eventually made a purchase. For a clothing retailer or a car dealership, pixel tracking is controversial but largely legal.
But when a pixel is embedded on a healthcare website — a place where people go to book appointments about sensitive medical conditions, seek addiction treatment, or access private patient records — the legal and ethical stakes change dramatically.
What Are These Websites Accused of Doing?
According to the Siri & Glimstad investigations, several healthcare-adjacent companies may have installed Google, Facebook, or Microsoft tracking pixels on sensitive areas of their websites — including appointment booking forms, patient portals, and treatment inquiry pages.When a user visited these pages and took an action — like filling out a form to book a consultation, searching for addiction treatment options, or logging into a student or patient account — the pixel allegedly captured that activity and transmitted details back to the tech platforms in real time.
This means that Google or Facebook may have received information indicating that you visited a page related to, for example, laser eye surgery, addiction recovery, or dermatology treatment — and potentially connected that information directly to your Google or Facebook account.
Researchers and investigative journalists have documented cases where Meta's pixel captured patient data including appointment types, doctor names, and even medication information from hospital websites — data that was then used to serve targeted advertisements.
The Specific Cases Being Investigated
The Skin Agency — California Med Spa
Location: CA | Status: Active InvestigationThe Skin Agency is a California med spa with locations in Glendale, Granada Hills, Toluca Lake, Beverly Hills, and Santa Clarita. The investigation alleges that patients who used the spa's website to book appointments online may have had their data improperly shared with Google or social media platforms via tracking pixels. Anyone who booked an appointment through the website in the past two years and has a Google account may potentially be affected.
See If You Qualify →
Western Governor's University (WGU) — Student Privacy Violations
Location: All US States | Status: Active InvestigationWestern Governor's University (WGU) is a large online university serving students across all 50 states. The investigation focuses on whether the school used pixels to track students who accessed WGU's online portal and transmitted that data to third-party advertisers, including Google and Facebook. Students who attended WGU in the past two years and have a Google or Facebook account are being asked to come forward.
See If You Qualify →
Recovery.com — Addiction Treatment Website
Location: All US States | Status: Active InvestigationRecovery.com is a website that connects individuals seeking addiction and mental health treatment with recovery facilities nationwide. Few categories of personal information are more sensitive than the fact that someone sought help for substance abuse or a mental health condition. The investigation alleges that users who visited Recovery.com while logged into Google or Microsoft accounts may have had that sensitive activity tracked and shared without consent.
See If You Qualify →
California Prime Recovery — Addiction Treatment Provider
Location: All US States | Status: Active InvestigationCalifornia Prime Recovery is a California-based addiction treatment provider. Similar to the Recovery.com investigation, the allegation is that the company's website used pixel tracking technology that transmitted private information about people seeking addiction treatment to Google or Microsoft — without user knowledge or consent. If you sought treatment through californiaprimerecovery.com and had a Google or Microsoft account, you may have a claim.
See If You Qualify →
Eyesthetica — California Cosmetic Surgery Practice
Location: CA | Status: Active InvestigationEyesthetica is a California cosmetic surgery practice with locations in Los Angeles, Pasadena, Santa Monica, Torrance, Irvine, Encino, and Valencia/Santa Clarita. The investigation alleges that patients who scheduled an appointment or took a self-evaluation quiz through the Eyesthetica website may have had their private information improperly shared with Google without their consent via tracking pixels. The self-evaluation quiz is particularly notable — people completing it were disclosing sensitive information about their interest in cosmetic surgery procedures, which makes the alleged data exposure especially personal. If you scheduled an appointment or completed a self-evaluation through eyesthetica.com and have a Google account, you may be entitled to compensation.
See If You Qualify →
Why Is This Potentially Illegal?
You might be wondering: if these companies disclosed pixel tracking somewhere in their privacy policy, is it really a legal issue?The short answer is: it may still be illegal, and for several reasons.
First, HIPAA — the Health Insurance Portability and Accountability Act — places strict limits on how healthcare providers and their business associates can use and share patient information. Healthcare entities generally cannot share patient data with third parties like Google or Meta for advertising purposes, regardless of what a privacy policy says. The U.S. Department of Health and Human Services issued guidance in 2022 and 2023 warning healthcare organizations that using tracking pixels in ways that expose patient data to third parties likely violates HIPAA.
Second, states like California have their own powerful privacy laws. The California Medical Information Act (CMIA) and the California Consumer Privacy Act (CCPA) provide additional layers of protection for California residents, and violations can carry significant penalties.
Third, federal wiretapping laws — specifically the Electronic Communications Privacy Act — may also apply, since the pixel technology essentially intercepts communications between a user and a website in real time and reroutes them to a third party.
This Is Part of a Much Bigger Trend
The investigations into The Skin Agency, WGU, Recovery.com, and California Prime Recovery are not isolated incidents. They reflect a broad legal reckoning that has been building for several years.Since 2022, dozens of hospitals, health systems, telehealth providers, fertility clinics, mental health platforms, and medical practices have faced lawsuits over pixel tracking. Major healthcare organizations have faced legal scrutiny or settled claims related to tracking technology on their patient portals and appointment scheduling tools.
The total amount at stake across all pending and potential litigation in this space runs into the hundreds of millions of dollars. Law firms specializing in privacy class actions have identified pixel tracking as one of the most significant sources of healthcare litigation in years.
For ordinary people, the concern is very real. You may have assumed that when you visited a website to book a doctor's appointment or research treatment options for a personal health issue, that information stayed private. In many cases, it may not have.
What Can Affected Users Do?
If you believe you may have been affected by any of these investigations — or by the broader pixel tracking issue at any healthcare or sensitive services website — there are several things to know.You do not need proof of actual harm to potentially participate in a class action. In many privacy cases, the unauthorized disclosure of your data is itself considered the harm. Courts have increasingly recognized that patients and consumers have a legal right to control their sensitive information, and that violating that right carries consequences regardless of whether you suffered a concrete financial injury.
Deadlines matter. Privacy class actions are subject to statutes of limitations, meaning there are time limits on when claims can be filed. If you think you may have been affected, it is worth looking into sooner rather than later.
If you booked an appointment online, sought addiction or mental health treatment through a website, or accessed a patient or student portal in the past two to three years — and if you had an active Google, Facebook, or Microsoft account at the time — you may have a claim worth exploring.
Who Might Qualify?
• People who booked an online appointment with The Skin Agency (California) in the past 2 years with a Google account• Current or former WGU students who accessed the online portal in the past 2 years with a Google or Facebook account
• Anyone who used Recovery.com to seek treatment while logged into a Google or Microsoft account
• Anyone who used the California Prime Recovery website to seek treatment while logged into a Google or Microsoft account
• Anyone who scheduled an appointment or took a self-evaluation quiz on the Eyesthetica website (California) and has a Google account
Pre-Qualify for Each Investigation
Use the links below to find out if you may be entitled to compensation:• The Skin Agency — Pre-Qualify Here
• Western Governor's University — Pre-Qualify Here
• Recovery.com — Pre-Qualify Here
• California Prime Recovery — Pre-Qualify Here
• Eyesthetica — Pre-Qualify Here
How Do I Find Class Action Settlements?
Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:Free Case Evaluation — No Proof Required
Click any of the links above to submit a free case evaluation form. A representative from Siri & Glimstad LLP will follow up to let you know if you may have a claim.
ATTORNEY ADVERTISEMENT. This page is published on behalf of Siri & Glimstad LLP. Siri & Glimstad LLP lawyers represent individuals and corporations in federal and state courts nationwide, though they may rely on co-counsel in certain jurisdictions. Submitting a form through any link on this page does not create an attorney-client relationship. No attorney-client relationship is formed unless and until a signed written agreement is entered. The information provided on this page is for general informational purposes only and does not constitute legal advice. Prior results described herein do not guarantee or predict a similar outcome in any future matter. Compensation is not guaranteed. Each case is different and must be evaluated on its own individual facts and circumstances. You should be aware that there are strict deadlines imposed by law — statutes of limitations — by which you must file any potential claim; you should not delay in seeking legal counsel. OpenClassActions.com is not a law firm, a settlement administrator, or the Court. This communication may be considered attorney advertising in some jurisdictions.
Filing Class Action Claims
Please submit only truthful information when completing any evaluation form. False or fraudulent submissions can be rejected and may carry legal penalties.
For more class actions keep scrolling below.
Bayer RoundUp Bug Spray Lawsuits
Status: Open to Claims
Submit Claim
Video Game Addiction Lawsuit
Deadline: Pending
Submit Claim
DraftKings & FanDuel Addiction Lawsuits
Status: Open
Submit Claim
Children playing Roblox and using Discord?
Pre-Qualify Here
Submit Claim
$4.17M RevitaLash Conditioner Settlement
Deadline: April 20, 2026
Submit Claim
$87.5M Beef Prices Settlement
Deadline: June 30, 2026
Submit Claim
Dollar General Bait & Switch Settlement
Deadline: April 13, 2026
Submit Claim| Investigation Summary | |
| Status | Active Investigations (Not yet settled) |
|---|---|
| Claim Form | Available — See links above |
| Potential Benefit | Compensation may be available |
| Category | Healthcare data privacy / Pixel tracking |
| Key Allegations | Unauthorized transmission of private health and personal data to Google, Facebook, and Microsoft via website tracking pixels |
| Laws Implicated | HIPAA, CMIA, CCPA, Electronic Communications Privacy Act |
| Investigating Firm | Siri & Glimstad LLP |
| Locations | CA (Skin Agency, Eyesthetica), All US States (WGU, Recovery.com, CA Prime Recovery) |
| The Skin Agency | Read More |
| WGU | How to Pre-Qualify |
| Recovery.com | Pre-Qualify Here |
| CA Prime Recovery | Learn More |
| Eyesthetica | Read More |