Cencora
Health Care
38
out of 100. Number 317 of 512, counting from the worst.
Where Cencora does well
- Arbitration 3 of 20. Few problems found.
- Renewals 0 of 20. Nothing found.
- No forced arbitration or class-action waiver: disputes go to court (Pennsylvania) rather than a private arbitration process, which is better than most consumer tech companies.
- Honors Global Privacy Control (GPC) signals for opting out of data sales/sharing and targeted advertising at the browser level.
- Grants a full slate of privacy rights (access, deletion, correction, portability, non-discrimination, appeal) with a dedicated data-subject request form, and promises notice of material privacy changes by email, prominent posting, or other channels.
- The Terms are also unusually upfront that the website is 'for information purposes only' and that third-party customer contracts remain separate and unmodified.
- No auto-renew or cancellation traps exist because there are no consumer subscriptions — the site is a corporate storefront, not a service signup funnel.
A pharmaceutical company's website is openly flagging that visits to its health-related pages can be treated as 'sensitive personal data' and sold to ad networks for targeted advertising.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
A pharmaceutical company's website is openly flagging that visits to its health-related pages can be treated as 'sensitive personal data' and sold to ad networks for targeted advertising. Health-interaction data being fed to ad networks is the single sneakiest thing in these documents.
When we engage in certain digital advertising, we may 'sell' or 'share' for purposes of cross-context behavioral advertising (as those terms are broadly defined under applicable state privacy laws) the following categories of Personal Data: personal identifiers (IP address), commercial information, sensitive Personal Data (to the extent usage and interaction data with certain health-related webpages on our Website may be considered 'health information' or a similar category of sensitive Personal Data under applicable state privacy laws) and internet or other electronic activity information. NOTICE: We may sell your sensitive personal data.
-
Third-party ad companies can scoop up your data straight from your browser when you visit Cencora's site — you don't even interact with Cencora itself for this to happen. It also ignores Do Not Track browser signals (it does honor Global Privacy Control).
Advertising Partners and Ad Networks: we work with third-party ad networks and advertising partners to deliver advertising and personalized content on our Websites. These parties may collect Personal Data directly from a browser or device when a user visits our Websites e.g., through cookies.
-
Cencora can change the rules whenever it wants with no notice; the moment the new version is posted it's binding, and just visiting the site afterwards counts as you agreeing. The burden is entirely on you to keep re-reading the terms.
Cencora may update and modify this Agreement at any time and from time to time, and such updates and modifications will be effective immediately upon posting the updated/modified Agreement. You agree to review this Agreement periodically to be aware of such updates and modifications and your continued access or use of this Web Site after any updates and modifications will be deemed your conclusive acceptance of the updated/modified Agreement.
-
This is a double whammy: the privacy policy is bolted into the terms, so any change to privacy practices is automatically a change to the terms too — again with no direct notice to you, effective the moment it's posted.
The Privacy Statement is incorporated into these Terms of Use by reference, as if set forth fully herein. Any changes to the Privacy Statement will be automatically incorporated into the Terms of Use, effective upon posting of such changes.
-
Anything you send them — questions, feedback, suggestions, even ideas for new products — they can use forever, for anything, including in their advertising with your name on it, royalty-free, and you can't complain if they profit off your idea.
You agree to grant to Cencora a non-exclusive, royalty-free, worldwide, perpetual license, with the right to use, sublicense, reproduce, distribute, create derivative works of, publicly display and publicly perform any Feedback... You also grant to Cencora the right to use your name in connection with the submitted materials and other information as well as in connection with all advertising and promotional material related to it. You agree that you will have no recourse against Cencora for any infringement or misappropriation of any proprietary right in your Feedback.
-
If their website harms you and you're not a paying customer, the most you can ever recover is $100. And you have only one year to sue, and only in their home county in Pennsylvania — convenient for them, inconvenient for everyone else.
IN ANY EVENT, THE TOTAL OF ALL DAMAGES, INCLUDING DIRECT DAMAGES... WILL BE LIMITED TO THE AGGREGATE AMOUNT OF ALL SUMS PAID BY YOU TO CENCORA FOR SERVICES PROVIDED THROUGH THIS WEB SITE DURING THE ONE (1) MONTH PRIOR TO THE DATE ON WHICH SUCH DAMAGES WERE FIRST INCURRED, OR IF YOU DO NOT PAY FOR ANY SERVICES RENDERED TO YOU THROUGH THIS WEB SITE, $100. ... You agree that any legal action or proceeding between Cencora and you for any purpose concerning this Agreement or the parties' obligations hereunder will be brought exclusively in a federal or state court of competent jurisdiction sitting in Montgomery County, Pennsylvania, USA. Any claim or cause of action you may have with respect to this Web Site must be commenced within one (1) year after the claim or cause of action arises or such claim or cause of action is barred.
How these were found
Terms and Conditions fetched directly from cencora.com on 2026-10-01 (no mirror needed). Terms are dated August 30, 2023 (© 2023) — stale for 3+ years, so the unilateral-modification clause is the live version visitors currently see. Privacy Statement last updated January 30, 2026; State Supplement last updated February 18, 2026. Cencora is a B2B pharmaceutical distributor with a thin consumer surface: public documents cover website visitors only; actual customer contracts (pharmacies, health systems) are not public and were not scored, so the score is intentionally modest and reflects only the public-facing web terms. A separate Event Terms of Use exists for event registration but was not the primary source.
These notes come from the original draft and are not independent verification.