Meta Pixel Healthcare Privacy Litigation

Meta's 'Pixel' is a small snippet of JavaScript code that website operators embed to track user behavior and serve targeted ads on Facebook and Instagram. Investigative reporting by The Markup in 2022 revealed that the Pixel had been installed on the websites of hundreds of hospitals, telehealth platforms, and healthcare providers across the United States. When patients used features such as online appointment scheduling, symptom checkers, or patient portals, the Pixel allegedly transmitted detailed information — including the specific doctor or condition searched, appointment dates, and even medication names — directly to Meta's servers, entirely without patient knowledge or consent.

Plaintiffs in the consolidated class action allege violations of the Electronic Communications Privacy Act (federal wiretapping statute), the California Invasion of Privacy Act (CIPA), HIPAA's privacy provisions (via aiding-and-abetting theories), and various state consumer protection laws. More than 100 hospitals and health systems — including major academic medical centers — have been named as co-defendants in related actions for deploying the Pixel. Meta has moved to compel arbitration and to dismiss on multiple grounds, but the court allowed core wiretapping and privacy claims to proceed. The litigation remains active, with class certification briefing ongoing as of 2025.