APEX VAULT.
Free compliance scan · No signup for the preview

See what your healthcare site is sending to Meta and Google.

Paste your URL. We'll show you what tracking pixels are firing, classify the risk level, and surface the regulatory framework those pixels have been litigated under. Preview is instant and anonymous. Full report is email-gated. Educational scan, not legal advice.

Static scan only — JavaScript-rendered trackers may not be detected by this free tool. Educational scan, not legal advice. No URL or result is stored.

What the scan checks. What happens next.

01 · Detect

Trackers on your site

We read your homepage HTML and identify Google Analytics, Meta Pixel, Google Ads tag, Bing UET, LinkedIn Insight, Hotjar, Microsoft Clarity, TikTok Pixel, and a few others.

02 · Classify

Risk level

CRITICAL (3+ trackers), HIGH (2), MEDIUM (1), or CLEAN. Plus a posture read — whether your site has cookie banners, privacy notices, or other governance signals deployed alongside the trackers.

03 · Report

Full findings to your inbox

Detected trackers with IDs, evidence snippets from your own page source, the statutes those trackers have been litigated under, and the architecture Apex Vault provides as an alternative. Sent by email after you confirm authority.

Why this matters.

State wiretap statutes (CIPA, Illinois Eavesdropping, NY Penal Law §250, Massachusetts Wiretap, Florida Security of Communications) and state consumer-health-privacy laws (Washington MHMDA, Nevada SB 370, Connecticut health-data provisions) are the framework plaintiff firms use to file against healthcare websites running standard analytics and ad-tracking pixels. $100M+ in aggregate settlements to date · docket active 2026.

The docket has accelerated post-Dobbs and post-AHA v. Becerra. Independent practices are now in the same fact pattern as the hospital-system cases. Standard consent and cookie-banner infrastructure has not stopped these filings — the architectural pattern at issue is distinct from what those tools were designed to address. Informational summary of the regulatory framework — not legal advice for your specific situation.

Read the full breakdown →

Skip the scan and just talk?

If you already know your site is running tracking pixels and you want to walk through what the architecture replaces them with, book a 15-minute call. No pitch, just the operational answer.