News roundup: VillageMD sued on Meta Pixel trackers; Cerebral pays $7.1M FTC fine on data sharing, cancellation policy; VA may resume Oracle Cerner implementation during FY2025; Epic-Particle Health dispute on PHI sharing

It’s all about personal health data–sharing, bad sharing, and bad transfers in this roundup.

VillageMD takes another hit, this time on Meta Pixel ad tracker issues. A class-action lawsuit filed on 10 April charges VillageMD (formally Village Practice Management Company), via its Village Medical website, of using the Meta Pixel ad tracker for disclosing user-protected health information (PHI) and other identifiable information generally classified as PII. This included visitors to their website villagemedical.com seeking information and patient users of Village Medical’s web-based tools for scheduling and the patient portal. The lawsuit by a “John Doe”, a patient since January 2023 resident in Quincy, Massachusetts but brought by three Midwest law firms in the US District Court for the Northern District of Illinois, states that VillageMD used trackers that transferred this personal information to Meta Networks’ Facebook and Instagram, as well as other third parties like Google, for use in targeted advertising, in violation of HIPAA and other regulations. The lawsuit seeks 1) an injunction stopping Village Medical from using ad trackers and 2) monetary redress via damages–actual, compensatory, statutory, and punitive for the entire affected class. The suit also alleges that VillageMD violated its own internal procedures. Crain’s Health Pulse, Healthcare Dive

Readers will recall that in June 2022, STAT and The Markup published a study and follow-ups on Meta Pixel and ad tracker use by healthcare organizations. Ostensibly, the ad trackers were there to better track website performance and to tailor information for the patient [TTA 17 June, 21 June 2022], but they sent information to third parties that violated HIPAA and privacy guidelines. Ad trackers were also monetized. Meta blamed the health systems [TTA 16 May 2023] for misuse though they used the data for ad serving.  Congressional hearings, FTC, and DOJ followed later in 2022 and 2023. Multiple class action lawsuits against providers large and small have ensued. Providers have pushed back on FTC and HHS rules on ad trackers, stating the restrictions hamper their ability to build better websites based on customer usage and to serve individuals with useful information. 

Another ‘oversharing’ company, troubled telemental Cerebral, whacked with $7.1 million FTC fine on disclosing consumer information via ad trackers plus ‘negative option’ cancellation policy. The proposed order for a permanent injunction filed by the Department of Justice (DOJ) and docketed on 15 April has to be approved by the Federal District Court for the Southern District of Florida. The fine for the company only penalized the following:

  • Cerebral released 3.2 million consumers’ information to third parties such as practices, LinkedIn, and TikTok. This included PHI and PII such as names, medical histories, addresses, IP addresses, payment methods including insurance, sexual orientation, and more. Even more outrageously, they also used the mail for postcards that had sensitive information such as diagnosis printed on them. The insult on injury was that Cerebral failed to disclose or buried information on data sharing to consumers signing up for their ‘safe, secure, and discreet’ services. Cerebral now has to restrict nearly all information to third parties.
  • Cerebral also set up their service cancellation as a ‘negative option’ cancellation policy, which in reality meant that it was renewed indefinitely unless the customer took action to cancel. It was not adequately disclosed in violation of the federal Restore Online Shoppers’ Confidence Act (ROSCA). Then Cerebral made it extremely difficult to cancel by instituting a complex procedure that required multiple steps and often took several days to execute. They even eliminated a one-step cancel button at their then-CEO Kyle Robertson’s direction. The order requires this to be corrected including deleting the negative option.
  • Former employees were not blocked from accessing patient medical records from May to December 2021. It also failed to ensure that providers were only able to access their patients’ records.

Cerebral’s settlement with the FTC and DOJ breaks down to $5.1 million to provide partial refunds to consumers impacted by their deceptive cancellation practices. They also levied a civil penalty of $10 million, reduced to $2 million as Cerebral was unable to pay the full amount. The decision and fine do not cover charges to be decided by the court against the former Cerebral CEO Robertson due to his extensive personal involvement in these practices. Those have not been settled and apparently were severed from the company as a separate action (FTC case information). Since 2022, Mr. Robertson has consistently blamed company management and investors for pushing for bad practices such as prescribing restricted stimulant drugs. Cerebral countersued him for defaulting on a $49.8 million loan taken in January 2022 to buy 1.06 million shares of Cerebral common stock. More to come, as the order also does not address other Federal violations under investigation, such as those under the Controlled Substances Act.  FTC release, FierceHealthcare  

VA to possibly resume Oracle Cerner EHR implementation at VA sites before the end of FY 2025, even if not in budget. During House Veterans’ Affairs Committee hearings on FY 2025 and 2026 budgets, VA Secretary Denis McDonough last Thursday (11 April) said that the VA intends to resume deploying the Oracle Cerner EHR as part of VA’s Electronic Health Records Modernization (EHRM) before the end of FY 2025. As Federal years go from October to September, FY 2025 starts October 2024 and ends September 2025. When asked if VA plans to maintain the “program reset” as they termed it in April 2023 for all of FY25, Secy. McDonough said that “we do not.”However, there is no budget allocated for additional implementations in either FY. The plan is to use carryover funding.

Oracle Cerner’s Millenium EHR was implemented at five VA locations before suspending in April 2023 for a massive re-evaluation which involved reworking systems such as the Health Data Repository which created critical scheduling and pharmacy problems detailed by the Office of Inspector General (OIG)  [TTA 28 Mar]. The joint VA and MHS/Genesis Lovell FHCC implementation, which went live in March, is not included.  NextGov/FCW, Healthcare Dive

And in another dispute about data sharing, leading EHR Epic cut off requests made by some Particle Health customers, expressing concern about privacy risks. Particle Health is a health data exchange API platform for developers. Both Epic and Particle are part of Carequality, a large scale data exchange group that connects 600,000 care providers, 50,000 clinics, and 4,200 hospitals to facilitate the exchange of patient medical records On 21 March, Epic filed a dispute with Carequality that some of Particle’s users “might be inaccurately representing the purpose associated with their record retrievals.” and stopped responding to some Particle Health customer queries. This has now degenerated into a ‘who said what‘ dispute, with Particle and their CEO alleging that Epic implied that it completely disconnected Particle Health and its customers from Epic’s data, while Epic has said that after a review by its 15-member Care Everywhere Governing Council, they flagged three companies who were using Particle’s Carequality connection to access data not related to patient care or treatment. There’s also a larger concern being brought up by providers on the use of these mass data exchanges for fraudulent extraction of data or use that would violate HIPAA guidelines. FierceHealthcare, CNBC, Becker’s, Morningstar

VillageMD names new president and COO as it shrinks to 620 locations

Jim Murray retires from Centene to take the role of VillageMD’s president and chief operating officer. The appointment was effective on 1 April. He will be responsible for leading operations of Village Medical, Summit Medical, and CityMD.  Last October, VillageMD named new divisional heads: Rishi Sikka, MD as president of Village Medical, Dan Frogel, MD as president and chief clinical officer of CityMD, and Becky Levy, JD as president of Summit Health and Starling PhysiciansVillageMD release, Crain’s Chicago Business

As noted previously, VillageMD has been retreating quickly from its aggressive plans circa 2022 for expansion into Walgreens locations to closure of the co-locations and already established free-standing offices. The planned 140 closures are well above the originally estimated 50, then 85 locations, including all in Florida and six in its home state of Illinois. Majority owner Walgreens has already taken a $5.8 billion writedown of its estimated $9-10 billion investment. Industry analyst Brian Tanquilut, a health care services equity research analyst at Jefferies, estimated to Crain’s that VillageMD lost $800 million in 2023.

Jim Murray retired as Centene’s chief transformation officer on 29 March, just in time to move to VillageMD.  His planned retirement was announced by Centene last May. Previously, he had been president and chief operating officer at Magellan Health from January 2020 to its acquisition by Centene in January 2022. Subsequently, Centene sold parts of Magellan such as Specialty Health and Rx. His experience crosses both provider and payer, at Dallas-based PrimeWest Health, the Dallas-based hospital system LifeCare Health Partners, and prior to that, 28 years at Humana, departing as chief operating officer. It does show one how close the circles are at the C-level. St. Louis Today

Walgreens’ latest cuts affect 646 at Florida, Connecticut distribution centers

Walgreens closes two distribution centers to ‘streamline capacities to best support our stores’. Two large centers serving Walgreens retail stores, in Orlando, Florida and Dayville (Killingly), Connecticut, are closing permanently in May, with workers discharged on or before 17 May. Affected are 324 workers in Orlando and 322 workers in Dayville who according to Walgreens will receive severance, additional separation pay, on-site career fairs, and/or outplacement services. While workers in Orlando have a better employment situation locally with unemployment at 3%, Dayville, in northeastern Connecticut’s rural Windham County near the Rhode Island border, is up to 5%. WARN notices were filed in both states about 14 March. Crain’s Chicago Business, Becker’s 

Press accounts do not mention corresponding closures of Florida or New England Walgreens stores. The puzzle is that Florida, particularly central Florida, is a growing market with a permanent population as well as seasonal/tourism. Yet all 52 Village Medical co-located offices have closed in that state [TTA 22 Feb]. Reasons why range from too small co-locations unable to support full practices to lack of doctors and medical saturation.

Walgreens, after several quarters of losses, is cutting to the bone expenses, with layoffs, consolidations, and closures everywhere from their Illinois headquarters to VillageMD. Despite the $1 billion in cuts for 2024 announced last October, Mr. Market is not responding–Walgreens’ stock price continues its downward trend and has lost 15% sharply since January. The new CEO Tim Wentworth has already positioned Walgreens’ recovery as ‘not a 12-month turnaround story’. Walgreens, over the past three years, drilled a lot of holes. Some worked out well, such as Shields, but the $10 billion investment in VillageMD may be a dry hole.  In the strategic review he announced earlier this month, Boots may be on the block, not Shields, but there will be more and deeper cuts to come–if WBA’s closely held ownership agrees. Based on the distribution center closures, expect more closures of retail locations served by those centers to be announced. 

Update: VillageMD lays off 49 in first two of six Village Medical closures in Illinois

VillageMD starts releasing staff in soon-to-shut Illinois clinics. Layoffs have already started in the Illinois clinics owned and operated by Walgreens-owned VillageMD. As reported in Crain’s Chicago Business, two of their six Village Medical clinics have given notice to doctors, practice managers, medical assistants, registered nurses, and ultrasound and radiology technicians. This eliminated 24 positions at the Lincoln Park (Chicago) office and 25 positions at their Wheeling clinic, both free-standing independent locations. The layoffs took place between 20 February and 5 March. It is not clear from the article or the WARN Notice filed 20 February with the state Department of Commerce whether the layoffs take effect by or on 19 April or if the clinics are being run by a skeleton staff before closure. 

A website check of Village Medical locations in Illinois has banners on each location’s page confirming that they will close on 19 April. Illinois WARN notices have not been posted yet for the four other locations.The only co-located Walgreens-Village Medical location is in Elk Grove, so the five free-standing locations may not have been part of the 2021-22 expansion or had been acquired in separate transactions.

VillageMD is headquartered in Chicago with an original footprint mainly in the Midwest to Texas, expanding to the East (plus specialty and urgent care) when it acquired Summit Health/CityMD in January 2023 for $8.9 billion

A VillageMD spokesperson told Crain’s that laid-off full-time employees will receive an ‘exit package’ which indicates that part-time employees may receive little to no assistance. “Support for patients” is limited to urging them to contact their insurance company for help in locating a new physician and office, then assisting in transferring their records. The spokesperson did not disclose if current patients are in the process of being notified nor how.

Based upon these initial layoff numbers, Village Medical’s layoffs in Illinois will be upwards of 150 at minimum. Their spokesperson declined to reveal the full number of layoffs in Illinois. If 25 per location is extrapolated to 85 locations across Village Medical, layoffs will be ~ 2,125.

VillageMD has been remarkably silent to the press about the closures and reorganization. It has not issued a press release since last October. Additional background TTA 29 Feb.

Breaking: VillageMD exiting Illinois clinics–in its home state–as closures top 80 locations

VillageMD to cut six locations in the Chicago area–five standalone, one attached to a Walgreens store. The clinics will close on 19 April.

The irony is that VillageMD is headquartered in Chicago.

In October, Walgreens announced that 60 Village Medical clinics would close. The Florida closings announced last week were in two phases, 14 and 38, a total of 52. With Illinois, the total would be 58. However, Crain’s Chicago Business stated late on Wednesday in its article that 12 Massachusetts locations closed in February. Last month, three locations in New Hampshire and all 12 Indiana clinics closed, bringing the total to 85.

This story will be updated as it develops.

Breaking: Walgreens’ VillageMD shutting in Florida; Change Healthcare system websites cyberattacked (updated 23 Feb)

The New Reality Strikes Again. Walgreens is closing all VillageMD locations in Florida. In addition to the 14 already closed, an additional 38 will be shuttered on 15 March for a total of 52. These are all co-located and attached to Walgreens locations (left).

Florida was a major expansion market for co-located clinics and its third largest market following Texas and Arizona) according to a report by investment analyst Jefferies.  In October, Walgreens announced the closure of 60 Village Medical locations in ‘non-strategic locations’. In January, CEO Tim Wentworth confirmed that about half of those locations were already closed. Doing the math, the rest of those locations will be in Florida.  Updated–see 29 February

Evidently, Walgreens’ US Healthcare unit views Florida as non-supportable to warrant a drastic move like this in a growing population market. Business Insider, which appears to have an inside track on this from the Jefferies report, “theorized” that many of these Village Medical locations were actually inside pharmacies–too small to attract patients and to recruit primary care doctors. If this is true, for a company that prides itself on retail know-how, as in the old real estate saw ‘location-location-location’, it has made a major and costly misstep.

Walgreens has sunk close to $9 billion into VillageMD: $5.2 billion for the majority stake and another $3.5 billion to aid with the Summit Health/CityMD buy. This does not include the earlier minority investment in VillageMD, so the total is likely well north of $10 billion. It all looked very different in 2020 when it was ‘go big or go home’. One wonders if VillageMD / Village Medical or its parts are on the selling block along with Shields Health if Walgreens has decided on a major strategic change.  Healthcare Dive

And another Reality is Cyberattack. Revenue cycle management and leading patient payment processor Change Healthcare is the latest victim. It notified users that it was disconnecting systems hours after Wednesday morning Eastern Time when it noticed disruptions to some applications that grew into “enterprise-wide connectivity issues.” The disruption is continuing into today (Thursday 22 Feb). There are few public specifics other than the timing and confirmation of the attack as of now, but it appears to have reached down to the local pharmacy level, into providers of all sizes, and shut down nearly every Change Healthcare system. This Editor visited the main website, which appears altered (shrunken); attempts to go to connecting links go to blank screens. Optum is not disclosing further information and perhaps shouldn’t at this point. Change Healthcare is part of UnitedHealth Group’s Optum and processes 15 billion transactions a year filled with PHI and PII, which adds to the scariness factor. TechCrunch, Becker’s, HealthITSecurity   This is a developing story and will be updated

Update 22 Feb: HISTalk reports that athenahealth customers are also affected, as their electronic data interchange is supported by Change Healthcare technology.

UnitedHealth Group said in an SEC filing that a “suspected nation-state associated cybersecurity threat actor” gained access to Change Healthcare’s information technology systems. It “cannot estimate the duration or extent of the disruption at this time.” UnitedHealth has retained security experts and was working with law enforcement. As of Thursday evening, the disruption continues and affects pharmacies nationwide in an inability to process insurance claims for prescriptions. Healthcare services are also being disrupted, said an unnamed director at a regional hospital system in Pennsylvania. Reuters

Update 23 Feb: Further corroboration in Fox Business on the above and continuing effects on pharmacies. Tricare, which covers active and retired military, stated on its website in a news release that this is impacting all military pharmacies worldwide. “Military clinics and hospitals will provide outpatient prescriptions through a manual procedure” until the ongoing cyberattack against Change Healthcare “is resolved.”

In more unwelcome news that this cyberattack is ongoing, the American Hospital Association (AHA) is formally advising healthcare facilities to not only disconnect from Change/Optum, but also check their own IT for vulnerabilities. AHA notice.  Also WSJ (not paywalled)

Walgreens and VillageMD kickstarting the ‘Go Big’ strategy of over 500 co-located primary care offices

Va-room! Back in July, Walgreens Boots Alliance and VillageMD announced a Really Big Deal that involved 500 to 700 co-located full-service Village Medical primary care offices in more than 30 markets over the next three to five years, along with a billion-dollar investment by Walgreens in VillageMD over the next three years. This week, they announced the opening of the first 40 “Village Medical at Walgreens”, in addition to the 5 pilot offices in Houston, by the end of summer 2021. The first openings will be in Phoenix starting in two weeks, with the remaining flight of offices in Houston, El Paso, and Austin, Texas, plus Orlando, Florida.

The coordination of the Village Medical office with Walgreens pharmacy and in-store services is apparent in the announcement, with much made of coordination among them in influencing patient medication adherence (right dose at the right time), health outcomes, and lowering the cost of care. Many of the clinics will be in traditionally underserved areas with high rates of medical disparities and multiple chronic conditions. In the July announcement, they pledged that over 50 percent would be located in HHS-designated Health Professional Shortage Areas and Medically Underserved Areas/Populations. Release.

For Walgreens Boots, it confirms that they aren’t wavering from their ‘go big or go home’ strategy, clearly targeted to revitalize their retail locations and pharmacy in higher potential markets. Since then, Amazon has opened up Pharmacy in addition to PillPack, CVS is integrating SDOH into pharmacy as a trial, and Walmart Health continues to waver with a limping expansion of 22 clinics in four states. Walgreens picked a very strong partner in VillageMD and Village Medical, which now have more than 2,800 physicians across nine markets, cover approximately 600,000 lives, and manage $4 billion in total medical spend in value-based contracts. They also haven’t slacked in their own efforts. Only last month, they acquired Complete Care Medicine in Phoenix, opening 17 clinics there by summer 2021, along with announcing 10 new offices in Atlanta. VillageMD is also featuring 24/7 telehealth and virtual care in its offices. 

News roundup: Amwell’s socko IPO raises $742M, Walmart and the Clinic Wars, Taskforce on Telehealth Policy report released, Israel’s Essence releases fall detection sensor system

Telehealth bullishness shows no sign of diminishing. On Wednesday, Amwell‘s (the former American Well) IPO stunned markets by not only debuting at $18 per share (a price only large investors received) but also opening at $25.51 on the NYSE (AMWL) and floating more than 41 million shares for a raise of $742 million. If underwriters exercise all their options, the raise could exceed $850 million. Only last week, the SEC filing projected a sale of 35 million shares at $14 to $16 a share. Back in August, the raise was estimated to be only about $100 million. (One could consider this a prime example of ‘sandbagging’.) Friday closed at $23.02 in a week where Mr. Market had a lot of IPOs and hammered traditional tech stocks. As reported earlier, Amwell is backed by Google via a private placement and also Teva Pharmaceutical.

Smaller and lower profile than Teladoc, Amwell provides services for 55 health plans, 36,000 employers, and in 150 of the nation’s largest health systems, with an estimated 80 million covered lives. Like Teladoc, Amwell has yet to be profitable, with 2019 losses of $88 million and $52 million in 2018. FierceHealthcare, Marketwatch. Meanwhile, the Teladoc acquisition of Livongo has gone quiet, as is usual.

The Clinic Wars continue. Another front in the consumer health wars (and repurposing retail) is more, bigger, better clinics onsite. CVS drew first blood early this year with the expansion of MinuteClinics into fuller-service HealthHUBs, with a goal of 1,500 by end of 2021. Walgreens flanked them with 500 to 700 Village Medical full-service offices [TTA 9 July]. In this context, the expansion of Walmart Health locations looks limp, with their goal of 22 locations in Georgia, Florida, Arkansas, and Chicago metro by end of 2021. Another concern is with scale and modularizing the Walmart Health locations’ construction via constructor BLOX,  One wonders with recently reported layoffs of 1,000 at corporate and the replacement of industry innovation veteran Sean Slovenski with Lori Flees, whether there’s some radical rethinking of their clinic business investment as not mass but targeted to underserved areas that avoid CVS and Walgreens. FierceHealthcare, Walmart blog  CVS also announced the doubling of their drive-thru COVID-19 testing sites to 4,000 by mid-October. FierceHealthcare

More Weekend Reading. Here in the US, the Taskforce on Telehealth Policy, a joint effort between the National Committee for Quality Assurance (NCQA), the Alliance for Connected Careand the American Telemedicine Association, has issued a report that focuses on maintaining quality care, fitting telehealth into value-based care models, enforcing HIPAA for patient privacy, and ensuring widespread and equitable access to broadband and technology. The involvement of the NCQA is a major step forward in advancing policy in this area. Press release/summary, Report page, Powerpoint slides, and webinar recording  Hat tip to Gina Cella for the ATA.

New entrant in passive fall detection. Israel’s Essence SmartCare is launching MDsense, a multi-dimensional fall detection solution for the residential market. It is sensor-based, using wall mounted intelligent sensors rather than wearable devices that statistically are not worn about half of the time and have their own well-documented performance concerns. The release also mentions it can differentiate between multiple persons and pets, which this veteran of QuietCare would like to see. MDSense is part of Essence’s Care@Home system which uses AI and machine learning to continuously collect actionable data to respond to fall events and manage care better towards improved outcomes.

Walgreens Boots goes big with billion-dollar medical office deal with VillageMD

Go big or go home. That seems to be Walgreens Boots Alliance’s’ theme in its 8 July announced deal with and investment in primary care provider VillageMD. They will set up 500 to 700 co-located full-service Village Medical offices in more than 30 markets over the next three to five years. The “Village Medical at Walgreens” offices will be staffed by a projected 3,600 primary care providers and fully integrated with Walgreens pharmacists for one-stop shopping. According to the release:

  • Most of the Village Medical medical offices will be approximately 3,330 square feet each, up to 9,000 square feet, and utilize existing store space. “80% will be used by VillageMD to fund the opening of the clinics and build the partnership.”
  • 24/7 care will be available via telehealth and at-home visits
  • Fees will be covered by insurance or for those without, on a sliding scale
  • Over 50 percent will be located in Health Professional Shortage Areas and Medically Underserved Areas/Populations, as designated by HHS. These would reach underserved “older, sicker, and poorer patients” without regular access to care, said VillageMD CEO Tim Barry in an interview with CNBC
  • Capacity would be 100 to 120 patients per day 

This follows on a pilot of five Village Medical clinics at Walgreens locations in Houston, and Village Medical’s eight-state expansion in the Find Care telehealth program announced in April.

Walgreens Boots Alliance will invest $1 billion in equity and convertible debt in VillageMD over the next three years, including a $250 million equity investment to be completed today which will culminate in about 30 percent ownership.

To this Editor, Walgreens is sitting at a giant poker table, stacking the $1,000 chips, and saying to its rivals, ‘see ya and raise ya’. These are full-service offices, not urgent care clinics, and they are investing in their provider. It could be transformative–or flop on executional niceties such as location, medical competition, or even COVID keeping down physical visits. The competition is also daunting on the retail side. Recently Walgreens has pared back hundreds of locations and faces the deep pockets of CVS-Aetna, which plans to open 1,500 HealthHUBs which integrate stores, MinuteClinics with nurse-practitioners, pharmacies, and health data, Amazon with PillPack aimed at its pharmacy business, and Walmart with its toe in the water with clinics. 

Village Medical, formerly Village Family Health, is a multi-state primary care provider which is part of Chicago-based VillageMD. Both include more than 2,800 physicians across nine markets, so the Walgreens deal will more than double their size. Also Forbes (Photo: Walgreens)