LAUSR

Digital pharmacies, defined as a website that offers a pharmacy service, provide a novel venue for convenient access to medication prescriptions compared to conventional pharmacies. Individuals’ prescription medication data are highly private. However, personal health information obtained by non-HIPAA covered entities either from individuals providing personal information or website monitoring, does not benefit from well-defined regulatory protections.1 Though, the prevalence of data-tracking among digital pharmacies is unknown. We determined the prevalence of data-tracking among accredited digital pharmacies. We conducted a cross-sectional study of data-tracking among accredited digital pharmacies on September 27, 2021. We obtained a complete list of currently accredited digital pharmacies from the National Association of Boards of Pharmacies (NABP).2 There are 88 digital pharmacies accredited by NABP. We excluded 2 due to redundancy and one due to a nonviable URL. Blacklight, a web-based tool that determines website-employed data-tracking, was used to identify website monitoring and data collection for each digital pharmacy website URL.3-5 Data collected from digital pharmacies included use of ad-trackers, third-party identification “cookies,” tracking that evades “cookie” blockers, session-monitoring services, keystroke capturing, availability of data for Facebook, and Google Analytics tracking. All data are publicly available. There are 85 included unique digital pharmacies that are accredited by NABP in the current report (Table 1). Of the 7 data-tracking features that Blacklight examines, 18 pharmacies used none, 28 used 4 or more (Figure 1). Over threefourths (76.4%) of digital pharmacies used ad-trackers, with 1 site using 34. Over one-half (57.6%) of digital pharmacies used third-party cookies, with 1 site using 62. The mean number of ad-trackers and third-party cookies per website was 4.14 (standard deviation [SD] = 5.35) and 5.06 (SD = 9.53), respectively. Software that evaded cookieblockers, monitored session activity, and captured keystrokes were found on 12.94% (11), 10.59 (9), and 8.24% (7) of digital pharmacies, respectively. Data were sent to Facebook and Google Analytics for advertising among 35.3% (30) and 42.4% (36) of digital pharmacies. Of digital pharmacies, the mean number of store-fronts was 198.45 (SD = 1201.43). Among accredited digital pharmacies, data-tracking services were common, with over two-thirds using at least two modalities for capturing user data. Ad-tracking, third-party cookies, and delivery of data to Facebook and Google Analytics were the most prevalent data-tracking features. The prevalence of data-tracking features on accredited digital pharmacies raises concern for how personal prescription medication data are shared in the digital ecosystem. The prevalence and use of digital pharmacies has been growing, with recent acceleration triggered by the COVID19 pandemic.6 According to a poll from the Alliance for Safe Online Pharmacies, 42% of U.S. adults used a websitebased pharmacy service in 2021, citing cost and convenience as the driving factors.7 This rapid growth has occurred despite a paucity of knowledge regarding the regulation of digital pharmacies and pharmacy services, nor knowledge on the privacy of personal data.7 Patients use digital pharmacies with the expectation that their data are secure and private. Given the substantial information patients provide to these websites, future investigation into how individual data are collected and trafficked is warranted. 1061757 AOPXXX10.1177/10600280211061757Annals of PharmacotherapyZheutlin et al letter2021