Help
List your practice on Zocdoc
Sign in / Register
Find a doctor on Zocdoc

ZOCDOC CONSUMER HEALTH DATA PRIVACY POLICY


Last Updated: March 4, 2026

This Zocdoc Consumer Health Data Privacy Policy (“Health Privacy Policy”) supplements our Privacy Policy and applies to “consumer health data” subject to certain U.S. consumer health privacy laws such as the Connecticut Data Privacy Act, the Nevada Consumer Health Data Privacy Act, the Washington State My Health My Data Act, and similar state laws (collectively, and as applicable, “Consumer Health Privacy Laws”). Any capitalized but not defined terms in this Health Privacy Policy will have the definitions set forth in the Privacy Policy or Consumer Health Privacy Laws.

Consumer health data does not include information that is publicly available, de-identified, or aggregated. What consumer health data we collect may differ depending on your state of residence and how you interact with us.

This Consumer Health Data Privacy Policy does not apply to “protected health information” (“PHI”), which is regulated by the Health Insurance Portability and Accountability Act (“HIPAA”). HIPAA provides specific protections for the privacy and security of PHI. Please read the Notice of Privacy Practices of your health care provider to understand how your PHI can be used and disclosed.

Consumer Health Data We Collect

As described in the “Categories of Personal Data We Collect” section of our Privacy Policy, the data we collect depends on the context of your interactions with us, the choices you make, and the services and features you use. Because consumer health data is defined very broadly, many different types of data that we collect could also be considered consumer health data. Examples of consumer health data may include:

  • Information that could identify your attempt to seek health care services or information, such as appointment data, including the healthcare providers you have considered or booked with.

  • Information about your health-related conditions, symptoms, status, testing, or treatments (including surgeries, procedures, medications, or other interventions), which may include reproductive or sexual health information.

  • Information about your health insurance coverage, including relevant ID numbers, copay, and billing information.

  • Other information that may be used to infer or derive data related to the above or other health information.

Sources of Consumer Health Data

As described in the “Categories of Sources of Personal Data” section of our Privacy Policy, we collect personal data (which may include consumer health data) directly from you when you use our services. We also may collect your personal data from your healthcare providers on Zocdoc, such as provider generated appointment confirmations in response to a booking request.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data for the purposes described in the “Commercial or Business Purposes for Collecting Data” section of our Privacy Policy. Primarily, we collect and process consumer health data as reasonably necessary (1) to provide you with the services you have requested or authorized and (2) in relation to the purposes of which such consumer health data was collected. This may include delivering and operating the services and their features, personalization of certain features, ensuring the secure and reliable operation of the services and the systems that support them, troubleshooting and improving the products, and other essential business operations that support the provision of the services (such as analyzing our performance, meeting our legal obligations, and conducting research and development).

Our Disclosure of Consumer Health Data

We may disclose the categories of consumer health data described above for the purposes described in the “How We Disclose Your Personal Data” section of our Privacy Policy. In particular, we may disclose personal data, including consumer health data, with your consent or as reasonably necessary to complete any transaction or provide any product you have requested or authorized, as described above.

Third Parties To Whom We Disclose Consumer Health Data

As necessary for the purposes described above, we disclose consumer health data with the following categories of third parties:

  • Service Providers. We may disclose consumer health data with our third-party service providers who provide us with services including, but not limited to, web hosting and data storage, technology and communications, fulfillment, analytics, insurance verification, staff augmentation personnel, virtual care, and security and fraud prevention. These service providers may have access to consumer health data that is necessary to perform their functions, but they are only permitted to use such data in connection with performing services for us. They are not authorized by us to use the information for their own benefit.

  • Healthcare Providers. Depending on your use of the service, we may disclose consumer health data with healthcare providers to enable them to refer you to, and make appointments with, other healthcare providers on your behalf, or to perform analyses on potential health issues or treatments.

  • Insurance Clearinghouse. We may disclose consumer health data with insurance clearinghouses to determine your eligibility and cost-sharing obligations, and to otherwise obtain benefit plan information on your behalf.

  • Business Partners. We may disclose consumer health data with other companies, for example, if you choose to use a social media platform to log in to the services, or where you use the services to interact with another company.

  • Payment Processors. Our payment processing partner (currently Stripe) collects your voluntarily provided payment card information as necessary to process your payment.

  • Parties to a Corporate Transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.

  • Government Agencies. We disclose consumer health data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to a valid legal process.

  • Other Third Parties. In certain circumstances, it may be necessary to provide consumer health data to other third parties, for example, to comply with the law or to protect our rights or those of our users.

  • Other Users and Individuals. If you use the services to interact with other users of the service or other recipients of communications, we will disclose data, including consumer health data, as directed by you and your interactions.

  • The Public. If you provide any consumer health data in a review posting or online discussion, or forum that is intentionally open to the public, this information will not be kept private. We recommend that you carefully consider whether to disclose any consumer health data in any public posting or forum. Anything you have written may be seen and/or collected by third parties and may be used by others in ways we are unable to control or predict. You can learn more about our reviews process here.

Consumer Health Data Rights

If you are a Connecticut, Nevada, Washington, or Virginia resident, you may have rights with respect to your consumer health data as described below. Your rights may be subject to certain conditions and exceptions under Consumer Health Privacy Laws.

  • Access and Portability: You may have the right to request confirmation of whether or not we are processing your consumer health data and to access your consumer health data and request a copy of your consumer health data in a machine-readable format, to the extent technically feasible. If you are a Nevada or Washington resident, you may also request a list of all Third Parties and Affiliates with whom we have disclosed or sold your consumer health data and their contact information.

  • Correction: You may have the right to correct inaccuracies in your consumer health data, to the extent such correction is appropriate in consideration of the nature of such data and our purposes of processing your consumer health data.

  • Deletion: You may have the right to request that we delete the consumer health data that we have collected about you.

  • Opt-Out of Sale, Targeted Advertising, and Profiling: You may have the right to opt-out of sale and/or processing of your consumer health data for targeted advertising and profiling purposes, however, we do not conduct such activities using your consumer health data.

  • Consent: You may have the right to consent prior to our collection, processing, and/or disclosure of your consumer health data, including but not limited to reproductive or sexual health information. You have the right to withdraw your consent for such collection, processing, and/or disclosure of your consumer health data.

  • Nondiscrimination: You have the right not to be discriminated against for exercising your rights as described above.

  • Appeal: If we refuse to take action on your request within a reasonable period of time after receiving your request in accordance, you may appeal our decision by contacting us at Privacy@zocdoc.com. If we deny your appeal, you have the right to contact the attorney general of your state of residence (CT, NV and WA).

How to Exercise Your Rights

To exercise any of your privacy rights under Consumer Privacy Laws, you can do so through the “Your Privacy Choices” page here or via the “Privacy” tab in your account settings page. If you have any questions about your privacy rights, please do not hesitate to contact us at:

  • E-mail: Privacy@zocdoc.com

  • Address: ZocDoc, Inc., 568 Broadway FL 9, New York, NY 10012

  • Phone: (855) 962-3621

  • Fax: (800) 701-9607

If you have an account with us, you can submit a request through the “Data Privacy” tab in your account settings. If you are a healthcare provider that does not have a Zocdoc account, you can submit a request through this form.