The invitation to join a corporate wellness program usually arrives with a cheerful subject line and a promise of better health, maybe even a discount on your insurance premium. But underneath the step counters and health risk assessments lies a much more complicated transaction. Most of what’s documented here about the privacy gaps comes from reporting by the Washington Post and research published in the Georgetown Washington Law Review—so we know the concerns are grounded in real investigations, not just speculation. The question isn’t whether the program is well-intentioned; it’s whether you actually know what happens to your data once you sync that smartwatch or fill out that questionnaire.
The Wellness Check That Isn’t as Simple as It Looks
Nearly 80% of large U.S. employers offer some form of wellness program, according to KFF researchers. The stated goal is to improve population health, reduce long-term medical costs, and foster a “culture of trust and wellness.” In practice, these programs collect an enormous amount of sensitive information: biometric screening results like blood pressure and cholesterol, detailed health-risk questionnaires covering mental health and substance use, and—increasingly—continuous streams of data from wearable devices.
A 2019 EBRI study found that 65% of employees with access to wellness programs were already concerned about how their health data would be used. That concern was well-placed. The regulatory framework protecting that data is what one analysis in the Georgetown Washington Law Review calls a system where the law regulates the channels through which health data flows, not the data itself. This means the same piece of information—say, your resting heart rate—can have vastly different legal protections depending on whether it’s collected by your doctor or by a wellness app your employer recommended.
⚖️
What the Vendor Sees vs. What the Boss Sees
The first distinction most employees miss is the difference between what their employer sees and what the wellness vendor sees. In a compliant program, the employer receives only aggregated, de-identified reports. The company learns that 30% of the workforce has high blood pressure, not that a specific person in accounting does. That is the standard line, and it’s a meaningful protection—when it works as described.
But around 20% of employers who offer health insurance were already collecting data from employees’ wearable devices, according to a Washington Post investigation. That data is routinely combined with records of past doctor visits and hospitalizations to build health snapshots of individual employees. The vendor sitting between you and your employer may be processing far more detailed personal information than the employer’s dashboard reveals. Sanket Shah, a senior director at Blue Health Intelligence, told the Post that major tech companies are “taking all these troves of data, and starting to provide a holistic view of population health and individual health.”
- What exact categories of data will be collected—steps only, or also sleep, heart rate trends, recovery scores, and location?
- Who receives the data: my employer, the wellness vendor, the wearable manufacturer, or analytics partners?
- Is the data shared with insurance brokers or used for underwriting decisions?
- How long is my data retained, and can I request its deletion if I leave the company?
The HIPAA Misconception That Leaves Data Vulnerable
I’ll admit it: I used to assume any health-related app on my phone was wrapped in the same privacy laws as my doctor’s office. It turns out that assumption is exactly what wellness vendors are betting on. A ClearDATA survey found that 81% of Americans mistakenly believe all health data from digital health apps is protected under HIPAA. For employer-sponsored wellness programs, that belief is often wrong.
HIPAA applies only to “covered entities”—healthcare providers, health insurers, and healthcare clearinghouses. If your employer’s wellness program is administered through the company’s group health plan, HIPAA protections apply. But if it’s a standalone voluntary program run by a third-party vendor, those protections may not exist. HHS guidance makes this distinction explicitly clear: when a wellness program is offered directly by the employer and not as part of a group health plan, the health information collected is not protected by HIPAA in the way most employees assume.
It depends entirely on how the program is structured. If it’s part of your group health plan, HIPAA applies. If it’s a standalone vendor program, your data is governed by the vendor’s privacy policy and whatever consumer data laws apply—which is a much weaker set of protections. The same data can fall under different rules depending on the channel it flows through.
If a vendor’s privacy policy sounds vague about data sharing, third-party access, or retention terms, that vagueness is itself useful information. It means you should assume the data flow is broader than the marketing copy suggests. The 2023 Data & Society report “Wellness Capitalism” notes that much of the wellness industry operates in a regulatory gray area where data may lack the same legal protections as information shared with a doctor.
When “Voluntary” Comes With a Price Tag
The language around wellness programs emphasizes that participation is voluntary. And legally, under the ADA, it must be. Employers cannot fire you, deny you coverage, or take adverse action for opting out. But the financial incentives tell a different story. More than two-thirds of employers (69%) with wellness programs use financial incentives to encourage uptake. For smoking-related targets alone, the average incentive for quitting was $682—more than triple the average reward for simply showing up.
It’s one thing to decline a program on principle. It’s another to watch a $600 incentive slip away because you value your privacy. Critics argue that when the incentive reaches 30% of the cost of self-only health coverage, the program becomes effectively coerced for lower-income workers. The EEOC has struggled to draw a clear line on what constitutes coercion, and more than 30 employers were sued in 2024 alone over wellness program practices related to these incentive structures.
The ADA requires that any medical information collected through wellness programs be kept confidential and separate from personnel records. But the law’s definition of “voluntary” is still being tested in court. If your employer ties a significant premium discount to hitting specific health benchmarks, the line between encouragement and pressure blurs quickly. This doesn’t mean the program is malicious—but it does mean the tradeoff is real, and it’s worth calculating whether the financial reward is worth the data you hand over.
The Real World: Aggregated Data, Identifiable People
One of the most unsettling examples to emerge from recent reporting involved a Texas plastics company. According to the Washington Post, the owner personally monitored individual employees’ daily step counts through a UnitedHealth app on his phone. He called employees directly to comment on their activity levels, including one worker who was weeks out from heart attack and bypass surgery. This is an extreme case, but it illustrates the core risk: the architecture of wellness programs can allow for surveillance that employees never signed up for.
Even when the employer is well-intentioned, the vendor ecosystem creates risks. A Duke University study found data brokers selling lists of individuals with specific mental health conditions, highlighting what can happen when wellness data is inadequately protected. Fitbit’s privacy policy states the company shares user information with corporate affiliates, service providers, and unspecified “other partners.” Once your data flows into that pipeline, controlling where it ends up becomes nearly impossible.
For a broader look at protecting your professional boundaries, our guide on data privacy for remote workers covers similar principles around controlling your digital footprint.
Asking the Right Questions Before You Sync
The goal isn’t to opt out of every wellness program. For many people, the benefits—lower premiums, better health awareness, a sense of community—genuinely outweigh the risks. But that calculation requires knowing what you’re actually agreeing to. Before you sync that smart ring or fill out that health questionnaire, it’s worth running through a quick due diligence process.
Review the policies
Read the wellness program privacy notice and the wearable app privacy policy. If the documents are vague about whether the program receives totals or richer health indicators, assume the sync is broader than the marketing copy suggests.
Identify the legal framework
Find out whether the program is part of your group health plan (HIPAA-covered) or a standalone vendor service (likely not HIPAA-covered). This single distinction determines most of your legal protections.
Ask about alternatives
Can you participate using manual logs, attestation, or a non-wearable alternative? If the only path to the incentive requires continuous tracking, the program is less “voluntary” than it appears.
Check the offboarding terms
What happens to your data if you leave the company or stop participating? Some vendors retain the right to use aggregated data indefinitely, even after your employment ends.
Lee Tien, a senior staff attorney at the Electronic Frontier Foundation, has warned that the growing reach of employer health surveillance creates risks beyond wellness: “It’s quite possible there will be effects on whether you are retained, promoted, demoted—who is first to be laid off.” That may sound alarmist, but the legal infrastructure is loose enough that the question remains open.
Whether the industry will shift toward genuine “privacy by design” or continue to mine health data for profit is still an unresolved question. What’s clear is that the burden of navigating this system currently falls on the employee. Your health data is valuable. Treat the decision to share it with the same care you’d treat any other asset in your career. The best wellness program is one that respects your boundaries as much as it supports your health.