APEX VAULT.
Free compliance scan · No signup for the preview

See what your healthcare site is sending to Meta and Google.

Paste your URL. We'll show you what tracking pixels are firing, classify the risk level, and surface the regulatory framework those pixels have been litigated under. Preview is instant and anonymous. Full report is email-gated. Educational scan, not legal advice.

Static scan only — JavaScript-rendered trackers may not be detected by this free tool. Educational scan, not legal advice. No URL or result is stored.

What the scan checks. What happens next.

01 · Detect

Trackers on your site

We read your homepage HTML and identify Google Analytics, Meta Pixel, Google Ads tag, Bing UET, LinkedIn Insight, Hotjar, Microsoft Clarity, TikTok Pixel, and a few others.

02 · Classify

Risk level

CRITICAL (3+ trackers), HIGH (2), MEDIUM (1), or CLEAN. Plus a posture read — whether your site has cookie banners, privacy notices, or other governance signals deployed alongside the trackers.

03 · Report

Full findings to your inbox

Detected trackers with IDs, evidence snippets from your own page source, the statutes those trackers have been litigated under, and the architecture Apex Vault provides as an alternative. Sent by email after you confirm authority.

Why this matters.

State wiretap statutes (CIPA, Illinois Eavesdropping, NY Penal Law §250, Massachusetts Wiretap, Florida Security of Communications) and state consumer-health-privacy laws (Washington MHMDA, Nevada SB 370, Connecticut health-data provisions) are the framework plaintiff firms use to file against healthcare websites running standard analytics and ad-tracking pixels. $100M+ in aggregate settlements since 2022.

The docket has accelerated post-Dobbs and post-AHA v. Becerra. Independent practices are now in the same fact pattern as the hospital-system cases. Cookie banners have not stopped the filings — state consumer-health-privacy laws contain a separate "sale" definition and a "Valid Authorization to Sell" standard distinct from general cookie consent. That distinction is part of why the docket continues to grow. Informational summary of the regulatory framework — not legal advice for your specific situation.

Read the full breakdown →

Skip the scan and just talk?

If you already know your site is running tracking pixels and you want to walk through what the architecture replaces them with, book a 15-minute call. No pitch, just the operational answer.