Labcorp
Health Care
70
out of 100. Number 44 of 512, counting from the worst.
Where Labcorp does well
- HIPAA Notice flatly pledges: 'Labcorp will not sell or license your PHI to third parties' — protected health information gets a hard no-sale promise, and PHI marketing requires your written permission first.
- Material changes to the User Agreement 'apply on a going-forward basis only. They do not apply retroactively' — a guardrail peers often skip.
- The arbitration clause carves out 'claims for personal physical injury or wrongful death or survival claims arising from or in any way related to clinical laboratory services,' so patients keep full court rights if lab work physically harms them.
- Substance use disorder records get extra federal (42 CFR Part
- protections requiring written consent, and mental health/HIV/genetic data carry additional safeguards.
Just by using Labcorp's website or patient portal, you give up the right to sue Labcorp in court or join a class action.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Just by using Labcorp's website or patient portal, you give up the right to sue Labcorp in court or join a class action. Disputes go to private arbitration, one patient at a time. No opt-out mechanism appears anywhere in the agreement.
You and Labcorp mutually agree, to the fullest extent of the law, that any Dispute shall be arbitrated and finally decided by binding arbitration administered by the American Arbitration Association ... each may bring claims against the other only in your or its individual capacity, on an individual basis, and not as a plaintiff or class member in any purported class, collective, non-individual, or representative proceeding.
Online Services User Agreement (Section 19: Arbitration and Class Action Waiver)
-
Labcorp explicitly reserves the right to SELL your personal data — to train its AI models — whenever the law doesn't stop it. For a company built on patient trust, the word 'sell' in its own privacy notice is remarkable.
Labcorp may collect, use and sell Personal Data for training of AI to the extent permitted by applicable law.
-
Labcorp can weaken the privacy rules governing your already-stored lab results, and the new rules apply retroactively to all the health data it already holds on you.
We can change the terms of this Notice, and the changes will apply to all PHI we have about you.
HIPAA Notice of Privacy Practices (Changes to the Terms of this Notice; effective Feb 10, 2026)
-
Even after you've submitted your order and been charged, Labcorp can revoke the offer or change the price — and only credit you back at its own pace.
Content, prices, and availability of products and services are subject to change without notice. Labcorp may revoke any stated offer and correct any errors, inaccuracies, or omissions, including after an order has been submitted and whether the order has been confirmed and your payment has been processed.
Online Services User Agreement (Section 30.f: Right to Change Terms and Conditions)
-
On subscription lab tests, miss a 4:00 PM ET cancellation deadline the business day before your draw and you're on the hook; fees for shipped kits and rescheduling are non-refundable regardless.
Cancellations [must] occur by 4:00 p.m. Eastern Time on the business day preceding the scheduled collection date ... non-refundable administrative fees for shipped kits and rescheduling.
Online Services User Agreement (Section 30.j: Subscriptions)
-
Any feedback or ideas you send Labcorp — about the site, its products, anything — become theirs forever, free, and they explicitly owe you nothing, not even confidentiality or credit.
You grant Labcorp a worldwide, perpetual, irrevocable, royalty-free, fully paid, transferable, and sublicensable license to use, reproduce, display, perform, modify, create derivative works from, distribute, and otherwise exploit the Suggestions for any purpose, without any obligation, payment, or credit to you ... Labcorp has no obligation to review or use any Suggestions, to keep any Suggestions confidential, or to provide you with any acknowledgment or compensation.
How these were found
Documents read directly from labcorp.com on Oct 1, 2026: Online Services User Agreement (https://www.labcorp.com/compliance/privacy/privacy-notice/online-services-user-agreement — page fetch showed no visible 'Last Updated' date, though the document references an AI/Data section and Section 31 MyLabcorp provisions consistent with a 2026 revision), Privacy Notice (https://www.labcorp.com/compliance/privacy/privacy-notice), HIPAA Notice of Privacy Practices (https://www.labcorp.com/compliance/privacy/hipaa — effective date stated as February 10, 2026). No mirrors were needed; labcorp.com did not block fetching. The Privacy Notice page fetch rendered only part of its content (purposes/recipients detail tables did not render), so the 'sell Personal Data for AI training' line was verified in the rendered Artificial Intelligence section. Labcorp's Privacy Notice covers non-PHI Personal Data (the HIPAA Notice governs PHI); the AI-sale clause does not claim to cover PHI. Notable external context (not scored as a clause): in Sept 2026 Labcorp entered a federal court settlement (U.S. District Court, Middle District of NC, announced via PR Newswire) over use of tracking technologies such as the Meta Pixel and Google Analytics on labcorp.com from May 1, 2021 to April 1, 2026, agreeing to pause those trackers for two years; the settlement provides only injunctive relief, no opt-out and no money to visitors.
These notes come from the original draft and are not independent verification.