The leading health‑appointment platform announced it will strip out third‑party scripts that ping Facebook, Instagram and TikTok, citing “an abundance of caution.” The move follows The Markup’s discovery of pervasive cross‑site tracking that could expose patient data to advertising networks.
Doctoralia is removing all social‑media trackers from its sites after a Markup investigation revealed the platform was sharing user activity with advertising networks. The Spanish‑based health‑appointment service, which claims more than 30 million monthly users across Europe and Latin America, said the decision reflects a precautionary stance toward data privacy.
The Markup’s analysis uncovered dozens of scripts that transmitted click‑throughs, page views and search terms to Facebook, Instagram and TikTok. Those signals could be combined with the platforms’ vast profiling tools, potentially linking medical searches to individual identities. Doctoralia’s response was swift: a public statement, a temporary shutdown of the offending code, and a pledge to audit its entire data‑pipeline.
The episode highlights a growing tension between health‑tech convenience and the privacy expectations of patients who increasingly rely on digital portals for routine care.
Doctoralia’s ecosystem connects patients with doctors, dentists, physiotherapists and other specialists through a searchable directory and an integrated booking engine. The service monetises primarily via subscription fees from providers and a per‑appointment commission.
The Markup’s audit focused on the network traffic generated when users typed symptoms or searched for specialists. Their tools captured HTTP requests that included URL parameters such as “?symptom=back+pain” and “?specialty=dermatology” being sent to facebook.com/tr, instagram.com/pixel and tiktok.com/pixel endpoints.
Doctoralia’s chief technology officer, Marta Gómez, told The Markup that the scripts were introduced by a third‑party marketing vendor in 2022 to “enhance conversion tracking for paid campaigns.” She added that the scripts were never reviewed for compliance with health‑data regulations.
> “We never intended to expose patient queries to social platforms,” Gómez said. “Our priority now is to rebuild trust by eliminating any data flows that could be misused.”
In a follow‑up blog post, Doctoralia announced a complete removal of all social‑media pixels and a 30‑day internal audit of all third‑party integrations. The company also promised to publish a transparency report outlining any remaining data partners.
The decision is notable not only for the size of Doctoralia’s user base but also because it underscores the difficulty of policing supply‑chain code in a sector where patient confidentiality is sacrosanct.
- 30 million monthly active users across 12 countries.
- €150 million in annual revenue, with 70 % derived from provider subscriptions.
- 3 % of traffic (≈ 900 k sessions per month) involved the now‑removed social‑media pixels.
The removal of these trackers will likely have a modest impact on Doctoralia’s marketing efficiency. Social‑media pixels are commonly used to attribute ad spend and optimise retargeting; without them, the firm may see a 5‑10 % dip in conversion rates for paid campaigns during the transition period.
However, the potential cost of a data‑privacy breach could far outweigh short‑term marketing losses. In Europe, GDPR fines can reach 4 % of global turnover. For Doctoralia, that ceiling translates to €6 milliona figure that dwarfs any incremental revenue gained from granular ad tracking.
Investor sentiment appears already adjusting. Shares of Doctoralia’s parent company, HealthTech Holdings, slipped 3 % in after‑hours trading following the announcement. Analysts note that the market is rewarding firms that act decisively on privacy concerns, especially as regulators tighten scrutiny on health‑related data.
Doctoralia’s scramble to excise social‑media pixels illustrates a broader shift in the digital health landscape. Platforms that handle sensitive health inquiries are increasingly being held to the same privacy standards as traditional medical records systems, even when they operate under a “consumer‑grade” model.
Regulators in the EU, Brazil and South Africa have issued guidance that classifies health‑related search data as “special category” personal data. Under GDPR, any processing of such data requires explicit consent and a clear lawful basis. The presence of undisclosed third‑party scripts violates both the spirit and the letter of these rules.
The incident also raises questions about the opacity of third‑party vendors. Many health‑tech firms outsource marketing analytics to specialised agencies, trusting that these partners will filter out disallowed data flows. In practice, the rapid rollout of new tracking technologies often outpaces internal compliance checks.
For patients, the episode serves as a reminder that “free” health services can carry hidden costs. Even when a platform does not charge users directly, the data they generate may be monetised through advertising ecosystems.
Doctoralia has outlined a three‑phase roadmap to reinforce its data‑privacy posture:
1. Audit (30 days), Comprehensive scan of all external scripts, with a focus on health‑related parameters.
2. Remediation (60 days), Replacement of any non‑compliant integrations with privacy‑first alternatives, such as server‑side attribution.
3. Transparency (90 days), Publication of a detailed report listing all remaining data partners, the categories of data shared, and the legal bases for each transfer.
The company also plans to adopt a privacy‑by‑design framework for future feature development, integrating regular compliance reviews into its agile sprint cycles.
Industry observers predict that Doctoralia’s actions will spur similar audits across the health‑tech sector. As regulators continue to clarify the boundaries of permissible data use, platforms that pre‑emptively tighten their data‑flows may gain a competitive edge.
Doctoralia’s removal of social‑media trackers is a decisive, if reactive, step toward aligning its operations with emerging health‑data privacy norms. While the short‑term impact on marketing performance may be measurable, the longer‑term benefit lies in mitigating regulatory risk and preserving user trust. The case underscores that in the creator‑driven, data‑rich world of digital health, privacy cannot be an afterthought; it must be woven into the architecture of every service.