Amazon just took over a primary healthcare company for a lot of money. Should we be worried? Mohiuddin Ahmed, Lecturer of Computing & Security, Edith Cowan University and Paul Haskell-Dowland, Professor of Cyber Security Practice, Edith Cowan University give an insight
Recently, Amazon announced plans to fork out $3.9 billion (A$5.6 billion) to acquire US healthcare company One
Medical. One Medical reportedly provides primary care on a membership basis to some 800,000 people across the US. In its own words, it claims to be “on a mission to make getting quality care more affordable, accessible and enjoyable for all.”
But why is Amazon – the company that helps you get a cheap home projector, or a toaster – investing in this area? What is One Medical?With a subscription fee of just $199 per year, One Medical helps bridge the gap between the US’ inefficient public healthcare system and people’s need for (expensive) healthcare insurance.It provides a comprehensive set of online resources for paying members, including a mobile app to seek medical
support and “24/7 access to virtual care”.
The company has done well for itself, reporting net revenue of more than $250 million in 2022’s first quarter.
Meanwhile, Amazon has been increasing its presence in the healthcare sector for some years. In 2018 it acquired PILLPACK, which became Amazon Pharmacy. And in 2020 it introduced Amazon Care – a virtual healthcare company that connects patients with a range of telehealth and primary care services. By acquiring One Medical, which was a competitor, Amazon is moving further in the US healthcare market. This isn’t dissimilar to what it did with book retailers when it first launched as what was essentially an.
Is it all about data?
Amazon knows a lot about its customers. Through user browsing and purchases made on its website, it collects vast amounts of data to better understand what people need and want – with the ultimate goal of selling more products and services. Amazon also has the option to tap into a worldwide network of Amazon-branded devices, such as Echo and Alexa. Recent research has suggested Amazon uses voice data collected through Alexa to target potential customers with advertisements.
Often, tech companies claim they collect data to generate a more positive experience for customers. They might be able to present you with personalised product options, saving you time and energy. But what about when you combine this data with more privileged and sensitive information related to your health?
Connecting the dots
Amazon isn’t just a giant online shopping mall. It’s also a leading provider of artificial intelligence (AI) services.
While there may be some legislative protections in certain jurisdictions, it wouldn’t be difficult for Amazon to connect the dots between people’s healthcare data and all the other data it already collects. An Amazon spokesperson said One Medical customer’s information protected under the US Health Insurance Portability and Accountability Act (HIPAA) would be “handled separately from all other Amazon businesses as required by law”.
This does point to some basic level of privacy protection; HIPAA is designed to protect people’s personally identifiable information, medical history and other sensitive health data. But how well Amazon can assure
customers this is being adhered to will hinge on it being transparent. Without this, it will be hard for anyone on the outside to figure out the inner workings of the data handling.
The spokesperson said: As required by law, Amazon will never share One Medical customers’ personal health information outside of One Medical for advertising or marketing purposes of other Amazon products and services without clear permission from the customer. Regarding needing “clear permission from customers”, ideally this means Amazon will ensure the permissions process is transparent. But transparency around data-sharing requests remains a murky issue in the big tech space. After all, voice data collected by Amazon devices can be deleted – but how many people do this? How many are aware they can?
Will Amazon start targeting Amazon Pharmacy ads for vital medications to One Medical patient who has provided “clear permission” for data sharing? In the past, Amazon has admitted to handing over people’s data (collected through its Ring doorbells) to US police, without consent or warrants. Expanding its empire? As Amazon steps further into the healthcare space, it’s not a stretch to think it could combine its AI capabilities and Alexa voice data to target sick people with medical products or Amazon Care services. In a worst-case scenario, we may see Amazon monopolising the US healthcare industry, with its usual practice of undercutting competitors and hardselling to customers. It lures customers with low prices, before egging them into buying more.
Amazon Pharmacy already offers discounted drugs to Prime members. And it could be imagined those willing
to pay higher fees might secure better healthcare from Amazon, opening a door to health insurance services. The wealth of information Amazon is aggregating also makes it a more attractive target for cyber-attacks
and data leaks. Information that was previously held in various, disparate networks is now contained within the
servers of one organisation. Criminals will inevitably take an interest. The sensitive nature of patient information, coupled with the fact that many health organisations still use outdated digital infrastructure, means the healthcare industry is ripe for exploitation.
This article is republished from The Conversation, under a Creative Commons license.
