{"page":"/blog/hipaa-compliant-marketing-platforms","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Platform","Public statement on BAAs","What the terms or policies say about health data","Source"],"rows":[["Google Analytics","\"Does not offer Business Associate Agreements in connection with this service\"","Customers \"must refrain from exposing to Google any data that may be considered\" PHI","Google Analytics Help"],["Google Ads","No public statement found","Customer Match bars \"advertising for products related to sensitive information, such as pharmaceutical products\"; \"Health\" is a restricted category for personalized ads","Customer Match policy; Personalized advertising policy"],["Meta","No public statement found","Business Tools Terms: advertisers may not share data that \"includes or is based on, directly or otherwise, health information\"","Meta Business Tools Terms, effective 3 November 2025"],["Meta (audiences)","No public statement found","From 2 September 2025, custom and lookalike audiences \"suggesting specific health conditions\" are flagged and cannot run","Meta for Developers, updated 14 July 2026"],["Microsoft Advertising","No public statement found","Not named among in-scope services on Microsoft's HIPAA page","Microsoft Learn, 29 July 2025"],["Adobe Advertising","No public statement found","Not on the HIPAA-Ready list; Adobe says PHI may not pass through non-designated services","Adobe Trust Center, September 2026"]],"sourceUrls":[["https://support.google.com/analytics/answer/13297105?hl=en"],["https://support.google.com/adspolicy/answer/6299717?hl=en","https://support.google.com/adspolicy/answer/143465?hl=en"],["https://www.facebook.com/legal/technology_terms"],["https://developers.facebook.com/documentation/ads-commerce/marketing-api/audiences/guides/custom-audiences"],["https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech"],["https://www.adobe.com/trust/compliance/hipaa-hds/hipaa-ready.html"]]}