Zocdoc is a private, VC-backed doctor-booking marketplace (Zocdoc Inc., Delaware corporation, HQ New York) that lets users find and book appointments with healthcare providers. Its Privacy Policy (effective March 4, 2026) collects broad account and visit data including health insurance details (plan, member ID, group ID, payer ID) and sensitive demographic categories such as gender identity, race, and sexual orientation, and states that disclosures to advertising partners "may constitute a 'sale' or 'sharing'" under U.S. state privacy laws, with opt-out and Global Privacy Control support. Apple's App Store privacy label corroborates broad identity-linked collection (precise location, contact info, search history, identifiers, advertising data) used for the developer's own advertising/marketing, but - unlike some peers - does not self-declare a "Data Used to Track You" cross-app tracking category. Ownership is traceable through SEC Form D filings naming founder/CEO Cyrus Massoumi and disclosing a $150M offering ($80M sold as of the 2015 filing), typical for a mature private company. Track record includes a 2020-discovered access-control bug (disclosed via a California AG letter, reported by TechCrunch in May 2021) that let former practice staff access data - including insurance details, Social Security numbers, and medical history notes - for roughly 7,600 patients; Zocdoc says its investigation found no indication the data was misused.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
7 ON FILE
COLLECTION
Apple's App Store privacy label for Zocdoc self-declares that data linked to the user's identity - including Location, Contact Info, Search History, and Identifiers (User ID, Device ID) - is collected for purposes including the developer's own Advertising or Marketing, not solely app functionality.
Zocdoc's Privacy Policy (effective March 4, 2026) lists, among the categories of Personal Data collected from Users, Health Insurance information (insurance plan, member ID, group ID, payer ID) and a separate 'Sensitive Demographic Data' category covering gender identity (specifically transgender/non-binary status), race, and sexual orientation, both disclosed onward to Healthcare Providers, Insurance Providers, and (for the insurance category) Health Information Exchanges.
SEC Form D filings for ZocDoc Inc. (CIK 0001417902), a Delaware corporation headquartered at 568 Broadway, New York, name Cyrus Massoumi as an executive officer and, in the August 21, 2015 filing, disclose a total offering amount of $150,000,000 with $80,000,000 sold to date across 9 investors.
Zocdoc's Privacy Policy states it may disclose Personal Data to third parties such as advertising partners, and that such disclosures 'may constitute a "sale" or "sharing"... for "targeted advertising"' under applicable U.S. privacy laws; it offers an opt-out and states it will process a detected Global Privacy Control signal as an opt-out request.
TechCrunch reported on May 24, 2021 that Zocdoc disclosed, in a letter to the California attorney general's office, a 'programming error' discovered in August 2020 that let former or past practice staff retain access to the provider portal after their credentials were supposed to be removed; Zocdoc confirmed roughly 7,600 U.S. users were affected, with potentially exposed data including insurance details, Social Security numbers, and medical history notes, and said a review of its access logs found no indication the data was misused.
Apple's App Store privacy label self-declares Identifiers (Device ID), Usage Data, and Advertising Data collected for the developer's Advertising or Marketing purpose, but the label does not list a 'Data Used to Track You' category for Zocdoc - i.e., the developer has not self-declared cross-app/cross-site tracking as defined by Apple's framework.
Zocdoc's Privacy Policy states the Service uses cookies and similar technologies - including pixel tags, web beacons, clear GIFs, mobile identifiers, and JavaScript - to recognize a visitor's device and browser, analyze trends, and tailor or customize advertising on and off the Service.