Did a physical therapy or occupational therapy clinic collect your data without consent?

How website tracking may expose your personal data

Have you visited a physical therapy or occupational therapy clinic’s website? If so, your online activity may have been tracked without your knowledge, raising potential data privacy concerns and possible violations of state or federal law. Fill out the form now to see if you qualify for a data privacy class action lawsuit.

Physical therapy and occupational therapy clinics provide treatments that help reduce pain, improve mobility, build strength, and support daily functioning. Because these providers work closely with sensitive health information, they are expected to protect patient confidentiality and follow strict data privacy rules.

Despite these responsibilities, some clinics may use website tracking tools that collect detailed information about visitors — including IP addresses, general location data, and browsing behavior — without clearly disclosing this practice or obtaining proper consent. These actions may violate state and federal privacy laws.

A class action lawsuit investigation is examining potential violations involving, among others, the following physical therapy and occupational therapy organizations:

• Banner Physical Therapy
• Benchmark Physical Therapy
• Concentra
• Dignity Health Physical Therapy
• Genesis HealthCare (Rehab Services)
• Golden Bear Therapy Partners (Therapy Partners Group)
• NovaCare Rehabilitation
• Select Medical – Outpatient Division
• Select Physical Therapy
• U.S. Physical Therapy Inc.
• Upstream Rehabilitation
• Others

If you visited one of these clinics’ websites or opened an email from one of these providers, your data privacy may have been compromised.

The law firm responsible for the content of this page is: Migliaccio & Rathod LLP; Washington, D.C.; 202-470-3520; classlawdc.com.

What are tracking pixels, and how do they affect your privacy?

Tracking pixels are tiny image files embedded in websites or emails. While they are often invisible to the naked eye, these tools are powerful website tracking devices that enable physical therapy and occupational therapy clinics to monitor user behavior, track clicks, record page visits, and gather detailed information about online activity.

What makes tracking pixels particularly concerning is their covert nature. They blend seamlessly into web pages and emails, making them nearly undetectable to most users. Many businesses use these tools to collect personal information without consent, potentially compromising your privacy.

CCPA: Understanding California’s privacy protections

The California Consumer Privacy Act (CCPA) gives California residents greater control over their personal data, including how businesses collect, use and share their information. Key rights under the CCPA include:

• The right to know what personal data is being collected, how it is used and if it is shared
• The right to request deletion of personal information
• The right to opt out of the sale or sharing of personal data
• The right to correct inaccurate personal information
• The right to limit the use or disclosure of sensitive information

Under the CCPA, businesses must clearly disclose how they collect and use personal information and provide users with the option to opt out. Using tracking pixels without notifying users or obtaining proper consent may represent a violation of California data privacy laws.

My Health, My Data Act: Understanding Washington State’s privacy protections

The Washington State My Health, My Data Act (MHMDA) gives Washington State residents greater control over their health-related data and sets strict rules for how businesses collect, share, and store this information. The Act requires covered organizations to:

• Provide a standalone privacy policy specific to consumer health data
• Obtain informed, opt-in consent to collect and separately to share consumer health data
• Obtain signed authorization for any sale of consumer health data
• Create systems that allow consumers to access, delete, or withdraw consent regarding their data

Using tracking pixels without notice or explicit consent may violate Washington’s data privacy laws.

Federal protections for data collection and website tracking

Several federal laws regulate how businesses collect and use personal information.

• The Federal Trade Commission (FTC) Act prohibits deceptive or unfair business practices, including undisclosed data tracking or sharing. If a physical therapy or occupational therapy clinic uses tracking pixels that transmit personal information to third parties without providing clear and upfront disclosure, it may be in violation of federal rules.
• Some clinics may also be required to follow HIPAA, which protects sensitive health information. If tracking tools capture or transmit information related to appointments, treatments, or other health-related inquiries without proper authorization, it may result in a HIPAA violation.

How to join the data privacy lawsuit 

If you live in California or Washington State and visited the website of any of the following physical therapy or occupational therapy providers, your personal information may have been collected or shared without your consent:

• Banner Physical Therapy
• Benchmark Physical Therapy
• Concentra
• Dignity Health Physical Therapy
• Genesis HealthCare (Rehab Services)
• Golden Bear Therapy Partners (Therapy Partners Group)
• NovaCare Rehabilitation
• Select Medical – Outpatient Division
• Select Physical Therapy
• U.S. Physical Therapy Inc.
• Upstream Rehabilitation
• Others

Collecting or sharing data in this manner may violate multiple privacy laws, including the FTC Act, HIPAA, the CCPA, and Washington’s MHMDA.

If you believe your information was improperly collected, you may have legal options and could be eligible to join this class action lawsuit.

Fill out the form on this page to see if you qualify for a free case evaluation.