How the commercial virtual care industry gathers, uses and values patient data: a Canadian qualitative study.

OBJECTIVES: To understand and report on the direct-to-consumer virtual care industry in Canada, focusing on how companies collect, use and value patient data.

DESIGN: Qualitative study using situational analysis methodology.

SETTING: Canadian for-profit virtual care industry.

PARTICIPANTS: 18 individuals employed by or affiliated with the Canadian virtual care industry.

METHODS: Semistructured interviews were conducted between October 2021 and January 2022 and publicly available documents on websites of commercial virtual care platforms were retrieved. Analysis was informed by situational analysis, a constructivist grounded theory methodology, with a continuous and iterative process of data collection and analysis; theoretical sampling and creation of theoretical concepts to explain findings.

RESULTS: Participants described how companies in the virtual care industry highly valued patient data. Companies used data collected as patients accessed virtual care platforms and registered for services to generate revenue, often by marketing other products and services. In some cases, virtual care companies were funded by pharmaceutical companies to analyse data collected when patients interacted with a healthcare provider and adjust care pathways with the goal of increasing uptake of a drug or vaccine. Participants described these business practices as expected and appropriate, but some were concerned about patient privacy, industry influence over care and risks to marginalised communities. They described how patients may have agreed to these uses of their data because of high levels of trust in the Canadian health system, problematic consent processes and a lack of other options for care.

CONCLUSIONS: Patients, healthcare providers and policy-makers should be aware that the direct-to-consumer virtual care industry in Canada highly values patient data and appears to view data as a revenue stream. The industry's data handling practices of this sensitive information, in the context of providing a health service, have implications for patient privacy, autonomy and quality of care.