Dexcom G7

"Technical information, such as: Internet Protocol (IP) addresses... browser type and browser language, device type, advertising IDs associated with your device (such as Apple's Identifier for Advertising (IDFA) or Android's Advertising ID (AAID)), date and time you use our Products and Services, Uniform Resource Locators, or URLs visited prior to arriving and after leaving our Products and Services, activity and online behavior while on our Products and Services and referring websites or applications."

Dexcom collects advertising IDs, browsing activity before and after visiting their services, and detailed online behavior tracking — data collection that extends well beyond what is needed for a glucose monitoring device.

"Health information, such as: ... location data^ ... We may make offers to you based on your activities or interactions with Dexcom that are not through online Products and Services (for example, regional offers based on the location of your office listed on order forms)."

Dexcom collects location data as part of health information (marked as sensitive) and also uses location for marketing offers, combining health device tracking with geographic profiling.

"Who receives the data? Dexcom, and our Affiliates... third parties who assist with fraud prevention, detection, and mitigation, third parties who assist with our information technology and security programs and our loss prevention programs, Dexcom's lawyers, auditors, and consultants, partners that assist us in providing or improving our Products and Services or help us improve our marketing or administration."

Dexcom shares personal data — including sensitive health data — with a broad and vaguely defined set of third parties including marketing partners, IT vendors, and business partners across multiple countries.

"We achieve this by using, and allowing third parties (including social media companies) to use certain cookies, eTags, pixels, web beacons, and other tracking technologies to track your activities while using our Products or Services or while using other online services... advertising IDs associated with your device (such as Apple's Identifier for Advertising (IDFA) or Android's Advertising ID (AAID))."

Dexcom uses advertising IDs and allows third parties including social media companies to track users across their services and other websites, enabling cross-context behavioral profiling of medical device users.

"Please review this Notice carefully. To the extent permitted by law, by providing us your Personal Data or otherwise interacting with us, you are agreeing to this Notice. If you do not agree with our policies and practices, it is your choice not to use our Products and Services or otherwise engage with us."

Dexcom treats any interaction as acceptance of their privacy notice, leaving users of medical devices with a take-it-or-leave-it choice on privacy terms for health-critical products.

"This Notice describes the types of Personal Data that Dexcom may collect or process, how we may use and disclose that Personal Data, and how you may exercise any rights you may have regarding our processing of your Personal Data."

While the policy references a section titled 'How Long Your Personal Data Will Be Kept,' the document provides no specific retention timelines or deletion schedules for any category of personal data, including sensitive health information.