Cigna
Health Care
61
out of 100. Number 110 of 512, counting from the worst.
Where Cigna does well
- Renewals 4 of 20. Few problems found.
- HIPAA Notice of Privacy Practices: 'When we use or give out your PHI, we are bound by the terms of this Notice' — Cigna commits to abide by its own stated health-data rules, and HIPAA gives members rights to access, amend, and get breach notifications for their health info.
- Mandatory binding arbitration is explicitly NOT applied to ERISA-governed employer plans: 'you have the right to bring civil action under Section 502(a) if you are not satisfied with the outcome of the appeal procedure.'
- Drug formulary changes come with 90-day advance written notice: 'we send targeted mailings to notify impacted members at least 90-days in advance of the scheduled prescription drug list status change.'
- The GLBA privacy notice is the federally standardized disclosure format, so the broad sharing is at least laid out plainly (including 'Federal laws don't allow you to limit' it) rather than buried.
- Cigna publishes a Washington My Health My Data Act consumer-health-data notice disclosing collection and sharing of consumer health data, and states it 'will not sell your application information to unaffiliated third parties for marketing purposes' for employment applicants.
If you buy an individual Cigna plan (at least in California), disputes you can't settle through Cigna's internal process go to binding arbitration, not court — Cigna writes this into the contract itself.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
If you buy an individual Cigna plan (at least in California), disputes you can't settle through Cigna's internal process go to binding arbitration, not court — Cigna writes this into the contract itself.
To the extent permitted by law, Cigna Healthcare contractually requires the use of binding arbitration when disputes are left unsettled by other means.
-
Cigna can hand over ALL your personal info — SSN, health history, claims data — to sister companies and outside firms, including to pitch you products and for joint marketing with other financial companies, and you are explicitly told you cannot opt out of this sharing.
We may share all of the personal information about you that we collect with affiliates and nonaffiliated companies (companies that are not under common ownership with us, such as our service providers) for our everyday business purposes... to: ... Offer you our other products and services... For joint marketing with other financial companies: We may share your personal information with other financial companies for the purpose of joint marketing... Federal laws don't allow you to limit the sharing of personal information as described above.
-
Cigna ignores your browser's Do Not Track setting, runs Meta's Facebook Pixel on its site, and lets Facebook link that browsing data to your Facebook profile and use it for Facebook's own ad business.
We do not honor a web browser's 'Do Not Track' signals. ... We may use Facebook Pixel, a web analytics and advertising service provided by Meta, Inc. on our Services... The data from Facebook Pixel is also saved and processed by Facebook. Facebook can connect this data with your Facebook account and use it for its own and others advertising purposes...
Website and Mobile Application Privacy Notice (Last Updated December 1, 2022)
-
Cigna can record everything you do on its site and apps — every click, scroll, and keystroke, including what you type into forms — and replay it later.
We may use third party services that employ software code to record users' interactions with the Services in a manner that allows us to watch replays of those user sessions. The replays include users' clicks, mouse movements, scrolls, and keystrokes/key touches (including information inputted into the site) during those sessions.
Website and Mobile Application Privacy Notice (Last Updated December 1, 2022)
-
Cigna can change its privacy rules whenever it wants, and simply continuing to use the site or app counts as your agreement to the new rules — no signature or explicit consent required.
We reserve the right to amend this Privacy Notice at any time... Any changes will become effective when we post the Privacy Notice on our websites. By continuing to use the Services following such changes, you will be deemed to have consented to such changes.
Website and Mobile Application Privacy Notice (Last Updated December 1, 2022)
-
Cigna can raise your individual-plan premiums with 60 days' notice, and can unilaterally rewrite parts of your policy if the ACA is struck down or amended.
Cigna Health and Life Insurance Company may change the Premiums of this Policy after 60 days' written notice to the Insured Person... Cigna Healthcare reserves the right to: (i) change the rates chargeable under the Policy and (ii) amend the terms of this Policy to eliminate, alter, or modify provisions required only by the Patient Protection and Affordable Care Act... in the event of either (a) entry of a final judgment by a court declaring all or part of the law invalid... or (b) amendments to the law by legislative act.
Cigna individual medical policy (ININDEPO052025, Connect Silver-2 SW 2700)
How these were found
Documents read directly from cigna.com (no mirrors used; no blocked fetches): (1) Customer Privacy Notice (GLBA), form code '902257 d 11/21', i.e. dated November 2021 but still the live version on cigna.com; (2) Website and Mobile Application Privacy Notice, 'Last Updated: December 1, 2022', from cigna.com's official assets path; (3) 'Cigna Healthcare in California' disclosure page (state-required disclosure, cigna.com/legal/members/health-care-forms/cigna-in-california) for the binding-arbitration clause; (4) individual medical policy PDF m-26-pol-in-s-94419in0010023-04.pdf (2025 policy year, 'ININDEPO052025') for premium/term-change clauses. A separate 2021-dated 'Online and Mobile Privacy Statement' with cross-border-transfer and unilateral-change language was found only via a third-party mirror link (claudeassets) and was not relied on; the Dec 2022 official version covers the same points. Cigna's generic website 'Terms of Use' page is JavaScript-rendered and not directly crawlable, so website-terms findings come from the official privacy notices and plan documents instead. Auto-renewal traps: no evidence found — ACA plan renewals are regulated with advance notice, hence the low autorenew score.
These notes come from the original draft and are not independent verification.