Elevance Health
Health Care
42
out of 100. Number 277 of 512, counting from the worst.
Where Elevance Health does well
- Arbitration 3 of 20. Few problems found.
- Renewals 3 of 20. Few problems found.
- Notably, the public consumer Terms of Use contain NO forced arbitration or class-action waiver — disputes go to court (Indianapolis), which is better than most corporate terms.
- The Elevance subsidiary web privacy statement commits: 'We do not sell, license, transmit, or disclose personal information collected by this site except when required or permitted by law' — a hard no-sale stance for web-collected data.
- The member HIPAA Notice of Privacy Practices (anthem.com) requires your written OK before sharing psychotherapy notes, before selling your PHI, or before using/sharing it for marketing, and lets you revoke that authorization in writing.
- The Carelon CCPA notice explicitly grants a 'Right to Opt Out of Sale or Sharing' with a real request channel (online privacy form or phone), and the SMS program opt-out is a simple STOP text.
- Health-plan collection language is narrowly scoped: patient info is 'only used or disclosed as is reasonably necessary to carry out treatment, to obtain payment for treatment, and to conduct health care operations.'
Elevance's Carelon unit lets online ad companies collect your identifiers, browsing activity, commercial info, and inferred profiles from its websites for behavioral advertising — and admits this counts as a 'sale' or 'sharing' of your personal info under California law.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Elevance's Carelon unit lets online ad companies collect your identifiers, browsing activity, commercial info, and inferred profiles from its websites for behavioral advertising — and admits this counts as a 'sale' or 'sharing' of your personal info under California law. The only thing they promise is no sale for cash.
We do not sell personal information in exchange for monetary consideration. We may disclose personal information by allowing certain third parties (such as online advertising services) to collect personal information via automated technologies on our websites for cross-context behavioral advertising purposes. Under CCPA/CPRA, these kinds of disclosures may be considered a "sale" when the personal information is exchanged for non-monetary consideration, or "sharing" when the personal information is disclosed for cross-context behavioral advertising purposes.
Privacy Notice for California Consumers (Carelon, an Elevance Health company; revised October 2025)
-
Your personal data flows to a long list of outside recipients, including data brokers and social networks — and, on the collection side, Carelon also buys data from 'resellers including consumer data brokers.' It is both a buyer and a distributor of brokered personal data.
During the 12-month period prior to the Last Updated date of this Notice, Carelon may have disclosed the following categories of personal information for the business purposes listed above to the following categories of third parties: ... Online advertising services and networks • Internet service providers • Data analytics providers • Operating systems and platforms • Social networks • Data brokers, such as background check services • Business partner's vendors • Joint marketing partners
Privacy Notice for California Consumers (Carelon, an Elevance Health company; revised October 2025)
-
If you use their website and have a claim against them, you must sue in Indianapolis, Indiana — no matter where you live — and you have only one year to file, far shorter than normal legal deadlines.
You agree that any legal action or proceeding between Elevance Health and you in any way related to this Agreement shall be brought exclusively in a court of a competent jurisdiction sitting in Indianapolis, Indiana. Any cause of action or claim you may have against or involving Elevance Health must be commenced within one year after the claim or cause of action arises.
-
They can change the terms whenever they want, with changes taking effect the moment they post them, and can cut off your access to the site at any time. Your only notice is being expected to re-read the page yourself.
Elevance Health may revise, modify or amend these Terms of Use at any time. Any such revision, modification or amendment shall be effective immediately upon either posting it to the website or otherwise notifying you. ... Elevance Health may terminate any User's right to use this website at any time.
-
For their text-message program: they can cut you off for literally any reason, your only remedy for any problem is to just quit, and you have to pay their legal bills if anything goes wrong from your use.
mPulse and/or Elevance Health may, at its sole discretion, terminate or suspend the access to the Services or any portion thereof of any user for any reason. ... If you are dissatisfied with the Services or any content on any of mPulse and/or Elevance Health website properties, or with these Terms and Conditions, your sole and exclusive remedy is to discontinue using the Services. ... You agree to indemnify, defend and hold harmless mPulse, Elevance Health, and their partners, clients, employees, officers and directors, from and against any and all claims, liabilities, penalties, settlements, judgments, fees (including reasonable attorneys' fees) arising from ... your use of the Services.
70601 Elevance Health SMS Terms & Conditions (mPulse-hosted)
-
They ignore your browser's Do Not Track setting entirely — and if you clicked in from a site that honored it, the protection evaporates the moment you land on their page.
We do not respond to web browser "do not track" signals, except where required by law. As such, your navigation of our site may be tracked as part of the gathering of quantitative user information described above. If you arrive at our website by way of a link from a third-party application that does respond to "do not track" requests, the recognition of any "do not track" request you have initiated will end as soon as you reach our site.
How these were found
Documents actually read on 2026-10-01: (1) elevancehealth.com/legal ('Legal Policies and Terms of Use') — fetched in full; it carries no printed version/effective date, so recency is established by the live fetch itself, not a stated date. (2) elevancehealth.com/privacy-policy — the live page is JS-rendered and only a partial section was extractable; the full long-form Elevance privacy policy was not readable, so web-privacy findings instead use two Elevance subsidiary Web Privacy Statements (BioPlus Specialty Infusion PDF and BioPlus Specialty Pharmacy page, effective Jan 1 2020, last reviewed July 2025) plus the Carelon CCPA Privacy Notice (revised October 2025, hosted at careloninsights.com; Carelon is an Elevance Health company and the notice itself references Anthem's services) — subsidiary docs are noted as such, not the parent policy. (3) mPulse-hosted '70601 Elevance Health SMS Terms & Conditions' (mpulse.com, Elevance-branded shortcode program) — read in full. No OpenTermsArchive/PrivacyTracker mirror was needed. Member-facing plan contracts (Evidence of Coverage / benefit certificates) were not reviewed — those are the documents most likely to contain coverage-dispute arbitration clauses, so the low arbitration score applies only to the public consumer-facing documents read.
These notes come from the original draft and are not independent verification.