UnitedHealth Group
Health Care
61
out of 100. Number 115 of 512, counting from the worst.
Where UnitedHealth Group does well
- Renewals 0 of 20. Nothing found.
- The arbitration clause has a genuine 30-day opt-out by mail — many insurers' arbitration terms offer none.
- The privacy policy states 'we do not use PHI for activities or secondary purposes not permitted by HIPAA,' and health-plan data handling is governed by a separate HIPAA Notice of Privacy Practices with real access/correction rights.
- The CA table shows personal data is NOT shared for advertising purposes (all categories marked No/None), and advertising cookies apply only to the careers site.
- Texting-program data 'will not be shared, sold, or disclosed to third parties for their own marketing purposes.'
Just by using UHC's website or app, you agree to binding individual arbitration and give up your right to a jury trial or class action.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Just by using UHC's website or app, you agree to binding individual arbitration and give up your right to a jury trial or class action. The only escape is a mailed letter to Minnesota within 30 days of first agreeing.
You and we agree to resolve any claims relating to these Terms, or the Online Services, through final and binding arbitration, except as indicated below under "Exceptions to Agreement to Arbitrate" or where prohibited by law... BY AGREEING TO THIS ARBITRATION AGREEMENT, YOU ARE GIVING UP YOUR RIGHT TO GO TO COURT, INCLUDING YOUR RIGHT TO A JURY TRIAL AND TO PARTICIPATE IN A CLASS ACTION.
-
UHC can rewrite the terms whenever it wants, changes take effect the instant they're posted, and your next visit counts as your agreement — no affirmative consent needed.
We may change these Terms at any time, and such changes will be posted on the Online Services... Any modifications will be effective immediately upon such posting. By continuing to use the Online Services, you consent to any changes to our Terms.
-
On the corporate site, UHG states it collects sensitive personal data — including health data, diagnoses, biometrics, and SSNs — and may disclose it for business purposes to employers (in the employer/plan-administration context). It does not sell/share it for advertising.
| Sensitive personal data categories ("Sensitive Personal Data") | Government-issued identification number, precise geolocation information, racial or ethnic origin, biometrics data, health data, mental or physical health condition or diagnosis, sexual orientation, citizenship or immigration status. | Yes | Employers | ... No | None |
-
There is no fixed data-deletion timeline — 'as long as is necessary' is open-ended — and UHC ignores browser Do Not Track signals entirely.
We will retain your personally identifiable information (PII) and Activity Information for as long as is necessary for the purposes set out in this Privacy Policy... Please note that we do not currently respond to web browser "Do Not Track" signals.
-
Anything you post or submit in their forums, health games, or message boards loses privacy protection, and you hand UHC a perpetual, worldwide, sublicensable license to reuse it in any way.
Any content you submit will be routed through the Internet and you understand and acknowledge that you have no expectation of privacy regarding that content... you grant the Company a non-exclusive, royalty-free, perpetual, irrevocable, and fully sublicensable right to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, and display such content throughout the world in any media.
-
UHC can cut off your account access at any time for no reason with no notice and no liability — and you only have one year (not the usual longer statute) to bring any claim, unless you live in New Jersey.
We may cancel, suspend or block your use of the Online Services and/or registration at any time, without cause and/or without notice. You agree that we will not be liable to you or any other party for any termination of your access... Unless you are a resident of New Jersey, you must initiate any cause of action within one year after the claim has arisen, or you will be barred from pursuing any cause of action.
How these were found
Terms of Use read directly from https://member.uhc.com/medicare/reference/terms-of-use (arbitration 'Resolving Disputes' section; no explicit effective date visible in fetched text; search index dated the crawl ~20 days before Oct 1, 2026). UHC Online Services Privacy Policy read directly from https://www.uhc.com/privacy (Effective Date: July 10, 2023 — roughly 3 years old, so the policy may be updated; no newer version located). UHG corporate privacy policy read directly from https://www.unitedhealthgroup.com/privacy.html (CA State Consumer Privacy Notice table, current as of fetch). No mirrors needed; no access blocks encountered. Findings cover only the Online Services terms/privacy documents, not the separate HIPAA Notice of Privacy Practices or plan-specific benefit documents, which govern claims/medical data handling.
These notes come from the original draft and are not independent verification.