Health & Pharmaceutical Data

Your medical history for sale

Health Data Brokers: Your Medical History for Sale

Perhaps the most disturbing category of data brokerage. These companies collect and sell data about your health conditions, prescriptions, mental health diagnoses, and medical treatments, often without the protections you might assume HIPAA provides. HIPAA only applies to healthcare providers, insurers, and their business associates. It does not cover data brokers who obtain health data through other means.

IQVIA (formerly IMS Health + Quintiles Transnational)

What they are: The largest health data analytics company in the world by market share.[1] Formed from the October 2016 merger of IMS Health and Quintiles Transnational (initially as QuintilesIMS, rebranded IQVIA in November 2017).[2] Publicly traded on the NYSE under ticker IQV. Annual revenue of approximately $16 billion (FY 2025).[1]

What data they have: Access to 1.2 billion unique non-identified patient records globally.[3] IQVIA’s National Prescription Audit covers approximately 93% of outpatient prescription activity in the United States,[4] processing billions of prescription records annually. Records contain year of birth, gender, partial zip code, and prescribing doctor names.[5] IQVIA buys detailed consumer data from Experian and links it with Americans’ health records to deliver marketing insights to drug companies and device makers.[6]

Who buys it: Pharmaceutical companies, healthcare providers, researchers, and government agencies.

Scandals: A STAT News investigation (July 2022) obtained internal documents showing that IQVIA employees themselves had raised concerns about the adequacy of privacy safeguards surrounding data on more than 120 million people.[6] The FTC sued in July 2023 to block IQVIA’s acquisition of Propel Media (parent company of DeepIntent), arguing that IQVIA’s data vault forms “the substrate of an entire industry focused on showering doctors and patients with marketing messages.” A federal judge granted the preliminary injunction in January 2024, and the deal was abandoned.[7] In August 2025, Senator Maggie Hassan wrote to IQVIA about its practice of hiding data opt-out options from search engines, following an investigation by WIRED.[8]

Legal history: Pre-merger, IMS Health successfully challenged Vermont’s data-mining restrictions in Sorrell v. IMS Health (2011), with the Supreme Court ruling 6–3 that the sale of physician prescribing data is protected commercial speech under the First Amendment — effectively establishing that data brokers have a constitutional right to sell doctor prescribing data.[9]

Datavant

What they are: Operates the largest health data connectivity platform in the United States. Links electronic health records, claims data, pharmacy records, lab results, clinical trial data, and social determinants of health data. Enables more than 60 million healthcare records to move between thousands of organizations, spanning 80,000+ hospitals and clinics and 75% of the 100 largest health systems.[10]

Who buys it: Life sciences companies, pharmaceutical firms, healthcare providers, payers, and government organizations.

Recent expansion: In 2025, Datavant completed three major acquisitions: Aetion (real-world evidence platform), Ontellus (health records retrieval), and DigitalOwl (AI-driven medical data analysis), bringing its ecosystem to over 300 data partners.[10]

HealthVerity

What they are: Connects to what it calls the largest real-world healthcare data ecosystem from 75+ sources.[11] Claims that 80% of the top U.S. pharmaceutical and biotech companies use HealthVerity.[11]

Tempus AI

What they are: Founded in 2015 by Groupon co-founder Eric Lefkofsky after his wife was diagnosed with breast cancer. Publicly traded (NASDAQ: TEM) since its June 14, 2024 IPO, which raised $410.7 million at a $6.1 billion valuation.[12] Built what it calls the world’s largest library of clinical and molecular data. Curates and sells de-identified data to pharmaceutical companies for drug discovery across oncology, cardiology, radiology, and depression.[12]

Komodo Health

What they are: Healthcare analytics company founded in 2014. Operates the “Healthcare Map” platform providing longitudinal claims data, patient journey analytics, medication data, specialty pharmaceutical data, EHR data, clinical data, and payer data.[13]

What data they have: The Healthcare Map encompasses 330 million unique patients’ healthcare journeys.[14] 160 million closed, linkable patient lives per year spanning Medicare, Medicaid, and commercial plans.[15] Adds approximately 16 million new clinical encounters daily.[14] 65 billion+ clinical encounters in its dataset.[13]

Who buys it: Pharmaceutical companies, biotech firms, payers, and healthcare providers.

Definitive Healthcare

What they are: Healthcare commercial intelligence company (NASDAQ: DH). Provides data on hospitals, physicians, healthcare organizations, all-payor claims data, prescription claims, reference data, social determinants of health (SDOH), and consumer-level data.[16]

What data they have: Analytics on 210 million+ de-identified patients.[17] Data covers 8,800 hospitals and IDNs, 10,000 ambulatory surgery centers, 14,000 imaging centers, 50,000 long-term care facilities, 1,400 ACOs and HIEs, 188,000 physician groups, and 1.6 million physicians, nurses, and allied health professionals. Claims datasets contain billions of de-identified records from commercial, Medicare, Medicaid, and federal programs.[16]

Who buys it: Pharmaceutical companies, medical device manufacturers, healthcare IT companies, staffing firms, and consulting firms.

Veradigm (formerly Allscripts)

What they are: Changed name from Allscripts to Veradigm in January 2023.[18] Owns Practice Fusion EHR. Practice Fusion paid a $145 million DOJ settlement in January 2020 — the first-ever criminal action against an EHR vendor — after admitting it solicited kickbacks from a major opioid company in exchange for programming clinical decision support alerts designed to increase prescribing of extended-release opioids.[19] The settlement included over $26 million in criminal fines and a deferred prosecution agreement on two felony anti-kickback statute counts.[19]

Merative (formerly IBM Watson Health, formerly Truven Health Analytics)

What they are: Acquired from IBM by Francisco Partners in a $1 billion deal completed June 30, 2022.[20] Provides healthcare claims data and analytics to healthcare organizations.

Name history: Thomson Reuters Healthcare → Truven Health Analytics → IBM Watson Health → Merative[20]

Veeva Systems

What they are: Cloud-based software and data company serving the life sciences industry. Veeva OpenData provides reference data on healthcare professionals (HCPs) and healthcare organizations (HCOs) including names, addresses, contact information, email, specialty, compliance data, license information, industry identifiers, and affiliations.[21]

What data they have: Approximately 16 million healthcare professional profiles and their affiliated organizations spanning 42 countries. All of the top 20 pharmaceutical companies globally are customers. Over 1,000 customers globally with a partner ecosystem of 100+ data companies.[21]

Who buys it: Pharmaceutical and biotech companies for sales, marketing, and medical operations.

IQVIA litigation: An eight-year legal battle with IQVIA over alleged trade secret misappropriation and antitrust counterclaims was resolved on August 18, 2025. Neither party paid damages; the companies dismissed all claims with prejudice and entered into long-term clinical and commercial partnerships, though Veeva made a one-time $31 million payment to law firms in connection with the resolution.[22]

Trilliant Health

What they are: Healthcare market intelligence company using all-payer medical and pharmacy claims data. Products include longitudinal patient journey analytics, provider directories, national demand forecasts, health plan price transparency data, and network performance management tools.[23]

What data they have: All-payer claims database covering more than 300 million Americans and approximately 70 billion medical claims (commercial, Medicare Advantage, traditional Medicare, and Medicaid). Provider directory with 9+ million rows of data covering 2.9+ million active physicians. Hospital price transparency dataset containing over 6 billion negotiated rates from more than 5,000 hospitals.[24] Works with 75+ of the top US health systems encompassing 1,500+ hospitals.[23]

Who buys it: Health systems, hospitals, physician groups, and life sciences companies.

Milliman IntelliScript

What they are: Collects and sells prescription drug purchase histories to life insurance companies for underwriting decisions. Aggregates data from pharmacies, health insurance companies, and pharmacy benefit managers across the United States. Provides risk scores quantifying the relative mortality risk of insurance applicants based on their medication history. Operates under the domain rxhistories.com.[25]

Why it matters: The service reveals sensitive health conditions through medication patterns — HIV medications, psychiatric drugs, fertility treatments — which privacy advocates argue constitutes indirect disclosure of medical conditions for commercial purposes. Registered as a Consumer Reporting Agency with the CFPB, meaning consumers can request their report.[26]

Scandals: A FOX 13 investigation titled “Your prescription records for sale” highlighted how Milliman IntelliScript makes detailed prescription histories available to insurers.[27]

The Mental Health Data Market

A Duke University study (February 2023) found that when researchers contacted 37 data brokers about purchasing mental health data, 26 responded and 11 were willing and able to sell it.[28] The 10 most engaged brokers advertised data on people with depression, attention disorder, insomnia, anxiety, ADHD, bipolar disorder, and PTSD — alongside ethnicity, age, gender, zip code, religion, net worth, credit score, and date of birth. One data broker charged $275 for 5,000 aggregated counts of Americans’ mental health records, while others charged upwards of $75,000 or $100,000 per year for subscription access to individual-level data.[28] Data brokers also openly compile and sell lists categorized by conditions including “Diabetes Interest,” “Cholesterol Focus,” “Smoker in Household,” and lists of people with cancer, HIV/AIDS, and hundreds of other illnesses.

Other Health Data Brokers

Flatiron Health – Acquired by Roche for $1.9 billion (2018). Oncology and cancer treatment data.[29]
TriNetX – Federated network covering 300+ million patients globally across 200+ healthcare organizations and 8,800+ sites.[30]
Medidata Solutions – Acquired by Dassault Systèmes (2019). Clinical trial data.[31]
Symphony Health (part of IQVIA) – Insights into patient behavior and real-world evidence. Covers prescriptions and sales data across retail, institutional, and integrated pharmacy channels from January 2010 to present.[3]
PurpleLab – Healthcare analytics through its HealthNexus no-code platform. Holds one of the largest claims databases in the US. Notably sells healthcare analytics to advertising organizations, blurring the line between healthcare intelligence and consumer marketing.[32]
Datamasters – Information reseller that bought and resold names, addresses, phone numbers, and email addresses of millions of people with Alzheimer’s disease, drug addiction, bladder incontinence, and other health conditions for targeted advertising. Its database contained 435,245 postal addresses for Alzheimer’s patients, 2.3 million records of blind or visually impaired people, and 133,142 records of addiction sufferers. Subject of a January 2026 California enforcement action resulting in a $45,000 fine and required permanent deletion of California residents’ data.[33]

Sources & References

[1] StockAnalysis: IQVIA Revenue – ~$16 billion FY 2025 revenue; 31.56% health analytics market share.
[2] IQVIA: QuintilesIMS Rebrands as IQVIA – October 2016 merger; November 2017 rebrand.
[3] IQVIA: Available Data – 1.2 billion patient records globally; Symphony Health data.
[4] CDC: Antibiotic Resistance Patient Safety Portal Data Methods (PDF) – IQVIA National Prescription Audit covers ~93% of outpatient prescriptions.
[5] IMS Health – De-identified data fields: year of birth, gender, partial zip code, prescribing physician.
[6] STAT News: Health Data Privacy – IQVIA/Experian (July 2022) – Internal documents showing privacy concerns over 120M+ people’s data.
[7] FTC: Sues to Block IQVIA’s Acquisition of Propel Media – July 2023 complaint; Jan 2024 preliminary injunction; deal abandoned.
[8] Senator Hassan: Pushes Companies to Improve Data Opt-Out Options – August 2025 letter to IQVIA about hidden opt-outs.
[9] Justia: Sorrell v. IMS Health, 564 U.S. 552 (2011) – Supreme Court ruled 6–3 that selling physician prescribing data is protected speech.
[10] Datavant: Completes Acquisition of Aetion – 300+ data partners; 60M+ records moving; 80,000+ hospitals; 2025 acquisitions.
[11] HealthVerity – 75+ data sources; 80% of top pharma/biotech (self-reported).
[12] Tempus AI – Founded 2015 by Eric Lefkofsky; NASDAQ: TEM IPO June 14, 2024; $410.7M raised.
[13] Komodo Health: Healthcare Map – 330 million patients; 65 billion+ encounters.
[14] BusinessWire: Komodo Health AI Offerings – 330M patient journeys; ~16M daily encounters.
[15] Komodo Health: Adds 90M Closed Lives Per Year – 160 million closed, linkable lives per year.
[16] Definitive Healthcare – Facility and provider counts; claims data from commercial, Medicare, Medicaid, and federal programs.
[17] Definitive Healthcare: Launch of Commercial Medical Claims – 210 million+ de-identified patients.
[18] Veradigm – Rebranded from Allscripts in January 2023; operates Practice Fusion EHR.
[19] DOJ: Practice Fusion $145M Settlement (January 2020) – First criminal action against EHR vendor; opioid kickback scheme; two felony AKS counts.
[20] Francisco Partners: Launches Merative (2022) – $1 billion acquisition completed June 30, 2022.
[21] Veeva Systems: OpenData – 16 million HCP profiles across 42 countries; top 20 pharma as customers.
[22] Veeva: IQVIA and Veeva Announce Partnership and Resolution of All Disputes – August 18, 2025; no damages; $31M to law firms; all claims dismissed with prejudice.
[23] Trilliant Health – 300M+ Americans; 70B claims; 75+ top health systems; 1,500+ hospitals.
[24] BusinessWire: Trilliant Health Hospital Price Database (2025) – 6 billion+ negotiated rates from 5,000+ hospitals.
[25] Milliman IntelliScript (rxhistories.com) – Prescription drug history aggregation for insurance underwriting.
[26] CFPB: Milliman IntelliScript Consumer Reporting Agency – Registered CRA; consumers can request reports.
[27] FOX 13 Investigates: Your Prescription Records for Sale – Investigation into IntelliScript data sales to insurers.
[28] Duke University: Data Brokers and the Sale of Americans’ Mental Health Data – February 2023 study; 37 brokers contacted, 11 willing to sell; $275 per 5,000 aggregated counts.
[30] TriNetX – 300+ million patients; 200+ healthcare organizations; 8,800+ sites globally.
[31] Dassault Systèmes: Medidata Acquisition (2019) – Clinical trial data platform.
[32] PurpleLab – HealthNexus platform; healthcare analytics sold to advertising organizations.
[33] CPPA: Datamasters Enforcement (January 2026) – $45,000 fine; 435,245 Alzheimer’s patient records; 2.3M blind/visually impaired; 133,142 addiction records.
← Back to Data Broker Directory