"CVS's privacy practices present a high risk due to extensive data collection, including sensitive health and biometric information, and broad sharing with third parties, including advertising networks. The vague data retention policies further exacerbate these risks."
cvs Privacy Concerns & Scorecard
CVS collects a wide range of personal and sensitive information, including health information and biometric data.
CVS shares data extensively with third parties, including advertising networks and subsidiaries.
CVS engages in third-party tracking for advertising purposes, which may compromise user privacy.
Data retention practices are vague, allowing for potentially indefinite retention of user data.
Users have some opt-out options, but the process may be confusing and lacks clarity.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Terms of Service Updates
Arbitration, Jury Trial Waiver, and Class Action Waiver Added
New version explicitly includes mandatory arbitration provision with jury trial waiver and class action waiver. This fundamentally changes dispute resolution from potential court litigation to binding arbitration with limited discovery and appeal rights. Users must now resolve disputes through arbitration rather than courts.
Effective: December 1, 2025
CVS Personal Health Record Functionality and Health Content Disclaimers Expanded
New section explicitly addresses CVS App Personal Health Record functionality with detailed disclaimers that health content is not medical advice and should not be used for self-diagnosis or treatment. Added emphasis that only healthcare providers can determine treatment for specific conditions, with new emergency guidance to call 911.
Effective: December 1, 2025
Expanded Liability Disclaimers for Health Information
New version includes explicit disclaimer that CVS and its suppliers are not responsible for claims, losses, or damages resulting from use of Services or health information. Added specific disclaimers regarding dietary supplements and FDA evaluation statements, shifting more risk to users.
Effective: December 1, 2025
Why We Analyzed cvs
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.