Check whether you may be eligible for the $32 million GoodRx privacy settlement and how to safeguard your medical data

A lawsuit says GoodRx passed users’ prescription and health details to Meta and Google.

People who used GoodRx could be entitled to a share of a $32 million settlement tied to claims that the prescription discount platform improperly shared user data with outside companies, including Meta, Google and the advertising firm Criteo.

GoodRx is a free tool for comparing prescription prices, along with a telehealth service. In a complaint filed in 2023, plaintiffs alleged that tracking tools on the GoodRx website and app transmitted information about users’ health conditions and medications to advertising partners without consent, violating several state laws.

GoodRx data privacy settlement at a glance:

• Settlement amount: $32 million
• Claim deadline: Dec. 29, 2026
• Estimated payment: To be determined
• Final approval hearing: Feb. 11, 2027

Court records say about 54.8 million people’s information was shared through GoodRx’s tracking tools. GoodRx has not admitted wrongdoing, but agreed to settle the case to put the allegations to rest.

The settlement is set for a final approval hearing on Feb. 11, 2027. If approved, it would resolve claims against GoodRx and Criteo. According to Open Class Actions, the claims against Meta and Google will move forward separately.

Here’s what to know about the settlement, including who may qualify for payment, how to submit a claim and how to better protect your health information.

Who may qualify for payment in the GoodRx settlement?

Per the settlement website, anyone who used the GoodRx website, app or service before April 20, 2024, may be eligible for compensation.

How much could I receive from the GoodRx settlement?

An estimated payment per person has not been set and will depend on how many valid claims are submitted.

The lead plaintiffs’ attorneys are requesting $10.67 million, or about one-third of the settlement fund, to cover fees and legal costs.

How do I submit a claim in the GoodRx data privacy settlement?

Eligible class members must file a claim by 11:59 p.m. ET on Dec. 29, 2026.

Claim forms can be submitted online, or you can download the form and mail it to the settlement administrator at:

GoodRx Data Disclosure Settlement
c/o A.B. Data Ltd.
P.O. Box 173138
Milwaukee, WI 53217
[email protected]
877-888-9232

If you do not want to be included in the settlement or want to keep the right to sue GoodRx on your own, you must send written notice by Dec. 29, 2026.

When might payment arrive from the GoodRx data privacy settlement?

The final approval hearing is scheduled for Feb. 11, 2027. If the court grants approval, payments would follow after that.

Appeals could delay the process.

How to protect your health data online

If you use GoodRx and are concerned about third parties receiving your health and prescription information, there are several steps you can take.

• Use a separate email address and a unique password when signing up for GoodRx to reduce account exposure.
• Avoid saving prescriptions, joining the GoodRx Rewards program or sharing optional health details.
• Review your privacy settings on the GoodRx website. You can also ask GoodRx to delete information through its data deletion form. GoodRx says some information may still be kept for legal reasons, and records held by pharmacies or healthcare providers follow their own policies.
• Set GoodRx location access to “while using” or turn it off, disable ad personalization where your phone allows it, and clear GoodRx cookies or browsing data after you use the service.

If you no longer want to use GoodRx, go to Account Settings and select “delete account.” Keep in mind that this will remove your saved prescription history and any unused Rewards points.

Beyond GoodRx, data brokers, people-search sites and other businesses also collect biometrics, demographic details, browsing history and other personal information.

By law, they must delete your information when requested. You can do it yourself for free, but finding the right page, filing the request and confirming completion can be time-consuming and confusing.

Services such as DeleteMe and Incogni say they can remove personal identifying information from data brokers’ records, lowering the chance that your identity will be exposed.

DeleteMe

• Product description

  The original personal data removal service, Abine DeleteMe removes your information from data broker sites using automation and human agents. Its simple process is designed for users who want a hands-off option.

• Reach

  Opts users out of more than 750 data broker sites

• Pricing

  $129.00/year for one person, $229.00/year for two people, $329/year for a four-person family plan. Business plans are also available. Full refund before your first privacy report, then prorated based on unused subscription time.

Incogni

• Product description

  Incogni offers four budget-friendly subscriptions, including two family plans with up to five members. Users can submit three addresses, phone numbers and email addresses.

• Reach

  Opts users out of more than 420 public and private data brokers. Higher-tier plans add unlimited custom removal requests.

• Pricing

  $15.98/month ($95.88/year) for the Standard plan, $29.98/month ($179.88/year) for the Unlimited plan, $31.98/month ($191.88/year) for the Family plan, and $45.98/month ($275.88/year) for the Family Unlimited plan.

These services cannot remove social media or public records such as deeds or bankruptcy filings, and they cannot change what appears on the dark web.

How to protect your personal data

Your prescriptions and medical records are only part of the data companies may collect about you. Some of that information can be used for fraud and to open accounts in your name.

In general:

• Be careful about what you post on social media.
• Think before clicking email links or opening attachments.
• Avoid public Wi-Fi when shopping or banking online.

Take steps to protect your identity

Aura

Plans from $10 to $32 per month, billed annually

Protects against identity theft, fraud, spam calls and websites, viruses and malware. Includes three-bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.

Identity Guard

From $7.50 to $25.00 per month, billed annually on individual plans and $12.50 to $33.33 per month, billed annually on family plans

Up to $1 million in insurance for eligible identity theft losses

Other helpful tips include:

1. Watch for cybersecurity alerts. If you do business with a company that has been targeted, search online for details and contact the company for more information. Read any alerts carefully and monitor your credit card statements for unusual charges.

2. Review your credit reports. It can take a while for an incident to be reported. Check your credit reports for suspicious activity. Your credit card issuer or bank should provide updated credit score information for free.

You can get free copies of your reports from each of the three major bureaus at AnnualCreditReport.com. Experian® offers a free credit report every 30 days, and Capital One’s CreditWise provides free access to your TransUnion credit report. Equifax offers two free credit reports per year through myEquifax.

For ongoing updates across all three reports, consider a paid identity theft protection service such as PrivacyGuard® or Experian IdentityWorks℠*.

PrivacyGuard®

• Cost

  $9.99 to $24.99 per month

• Credit bureaus monitored

  Experian, Equifax and TransUnion

• Credit scoring model used

  VantageScore

• Dark web scan

  Yes, for Identity and Total Protection plans

• Identity insurance

  Yes, up to $1 million for Identity and Total Protection plans

Terms apply.

Experian IdentityWorks℠

• Cost

  Basic: Free; Premium: 7-day trial, then $24.99 per month; Family: 7-day trial, then $34.99 per month

• Credit bureaus monitored

  1-bureau credit monitoring, alerts and reports: Experian with the Basic plan only; 3-bureau credit monitoring, alerts and reports: Experian, Equifax and TransUnion® with Premium and Family plans only

• Credit scoring model used

  FICO® Score 8, with all plans

• Dark web scan

  Yes, with all plans

• Identity theft insurance

  Yes, up to $1 million with all plans

Terms apply.

*Identity Theft Insurance is underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). This summary is for informational purposes only and does not include all terms, conditions and exclusions. See the actual policies for full details. Coverage may not be available in all jurisdictions.

3. Use a password manager. Password managers keep track of usernames, passwords and email addresses. Services such as Keeper and Dashlane also offer dark web monitoring, email masking and other features.

Keeper

• Cost

  Keeper Free: $0; Keeper Personal Plan: $1.79 per user per month; Keeper Family Plan: $3.83 per month; Business Starter Plan: $7.00 per month.

• Standout features

  Lets users import from other password managers, customize autofill settings for individual websites and share one-time passwords.

• Offers free version

  Yes

• Availability

  Available for web, desktop and mobile devices.

• Security features

  Keeper uses a zero-knowledge model, government-standard AES-256 encryption, supports multi-factor authentication and biometrics, and runs quarterly third-party penetration tests.

Terms apply

Pros

• Helps you securely share passwords and files
• Offers unlimited password storage
• Supports fingerprint and Face ID login
• Password strength report

Cons

• Free version is limited to one mobile device
• Less intuitive interface
• Dark web monitoring and file storage are only on paid plans

View More

Dashlane

• Cost

  Premium: $5.42 per month; Friends & Family: $8.13 per month; Business: $8.00 per month. All prices are monthly with annual billing selected.

• Standout features

  The Premium plan includes VPN access, a password health checker and dark web monitoring, and users can securely store sensitive documents.

• Free version

  No

• Availability

  Available for web and mobile devices.

• Security features

  Dashlane uses a zero-knowledge model, government-standard AES-256 encryption and multi-factor authentication. It supports biometrics and has passed third-party security audits.

Terms apply.

Pros

• VPN comes with the basic subscription
• Dark web monitoring
• Real-time scam protection
• Password manager has a 14-day free trial

Cons

• No free tier
• More expensive than some competitors
• Lacks desktop app
• Annual billing only

View More

4. Freeze your credit. Even if you are not involved in a recent data breach or privacy lawsuit, freezing your credit reports can stop others from opening new accounts in your name. It will not affect your credit score, and you can lift the freeze whenever you choose.

Aura

• Cost

  Kids: $13 per month or $10 per month billed annually; Individual: $15 per month or $12 per month billed annually; Couple: $29 per month or $22 per month billed annually; Family: $50 per month or $32 per month billed annually

• Standout features

  Protects against identity theft, fraud, spam calls and websites, viruses and malware. Includes three credit bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.

• Identity theft insurance

  All plans include at least $1 million and white-glove fraud remediation

Terms apply.

Pros

• 14-day free trial
• Family plan includes up to 5 adults and an unlimited number of children
• Discount if you buy an annual plan
• Up to $1 million to cover losses or expenses related to identity theft

Cons

• Doesn’t monitor social media accounts
• Annual plans can only be canceled within the first 60 days for a money-back guarantee

View More

Identity monitoring service Aura can freeze your credit without requiring you to contact the credit bureaus. It also includes a range of other security tools, such as a password generator, email aliases, a VPN, robocall filters and malware protection.

FAQs

What is the GoodRx data privacy class action settlement about?

GoodRx helps consumers compare prescription prices and find discount coupons for medications. In the complaint, plaintiffs said the company shared private prescription and health information with outside parties, including Meta and Google, in violation of the California Confidentiality of Medical Information Act, New York’s General Business Law and other laws.

Who can file a claim in the GoodRx digital privacy settlement?

Anyone who used the GoodRx website, app or service before April 20, 2024, may qualify for a payout. The claim deadline is Dec. 29, 2026.

How much money could I get from the GoodRx settlement?

An exact payment amount has not been announced. The plaintiffs’ attorneys are seeking $10.67 million, or about one-third of the settlement fund, for fees and legal expenses. Eligible class members are expected to receive an equal, pro-rata share of the remaining $21.2 million, but the final amount depends on how many valid claims are filed before the deadline.

Subscribe to the CNBC Select Newsletter!

The CNBC Select Recommends newsletter delivers practical money tips each week along with expert-picked financial product recommendations. Sign up here.

Why trust CNBC Select?

At CNBC Select, our mission is to provide readers with high-quality service journalism and thorough consumer advice so they can make informed financial decisions. Every data privacy article is based on rigorous reporting by our team of expert writers and editors. While CNBC Select earns commissions from affiliate partners on many offers and links, we create all content without input from our commercial team or outside third parties, and we take pride in our journalistic standards and ethics.

Catch up on CNBC Select’s in-depth coverage of credit cards, banking and money, and follow us on TikTok, Facebook, Instagram and X to stay up to date.

* Important information: A credit card is required to start your free 7-day trial membership^‡ in Experian^® Plus or Experian^® Premium. You may cancel your trial membership at any time within 7 days without charge. If you do not cancel, your membership will continue and you will be billed $24.99 each month for Experian^® Premium.

Editorial Note: Opinions, analyses, reviews or recommendations expressed in this article are those of the Select editorial staff alone and have not been reviewed, approved or otherwise endorsed by any third party.