Health Audience Data and Identity: A Buyer's Evaluation Guide
An evidence chain for evaluating health audience data and identity, from source and permission to match, activation, and outcome.
The short answer
Buying health audience data is buying a chain of claims. The vendor claims the data came from a legitimate source, that it may be used for advertising, that it was transformed into segments accurately, that it matches to reachable people or devices, and that reaching those people helps the brand. Each link can fail independently. A buyer's job is to check each one.
This anchor page introduces the data and identity series.
The five-link evidence chain
| Link | Question | What good evidence looks like |
|---|---|---|
| Source | Where did the underlying data come from? | Named source types, collection context, dates |
| Permission | Is this use allowed? | Notices, consent records, contract terms, legal review |
| Transformation | How were raw signals turned into segments? | Documented logic, model validation, refresh cadence |
| Match | How are segment members connected to reachable identifiers? | Match method, rates, deterministic share |
| Outcome | Does reaching this segment help? | Test results with comparison groups |
A vendor who is strong on one link and silent on others has not made the case.
Source and provenance
Ask what kinds of data feed the segment: transactions, surveys, app behavior, claims, or modeled signals. Ask how old the source data is and how often it is refreshed. See health data provenance questions for a full list.
Permission and fitness for use
Permission is not a single yes or no. Data may have been collected with consent for one purpose and not another. A contract may allow advertising use but not measurement. A use may be legal but still inconsistent with the brand's own privacy commitments. See consent, permission, and fitness for use. The FTC's Health Breach Notification Rule and state consumer health data laws are part of the landscape your counsel should review.
Transformation and accuracy
Most health segments are modeled or inferred to some degree. Ask how accuracy is measured and against what truth set. A vendor claiming "90% accuracy" should be able to say accuracy of what, measured how, and on which population.
Identity and match
Identity is where many segments lose most of their value. A segment of one million people may match to far fewer reachable devices. Ask about identity graph quality, household identity, and the share of deterministic matches.
Outcomes
The only way to know whether a segment helps is to test it against an alternative. Vendor case studies describe what happened for other brands under unknown conditions. Treat them as hypotheses. Where possible, run a head-to-head test using the same measurement partner and period.
Freshness and overlap
Two more checks matter. Data ages: see how old is too old. And segments overlap: buying three similar segments may add little reach. See audience overlap analysis.
Put it in the contract
Evaluation findings only protect you if they are enforceable. Turn key evidence into contract terms: permitted uses, deletion obligations, audit rights, and notification if sources change.
Practical takeaway
For every health data vendor, fill in the five-link table with evidence, not claims. Any link marked "unknown" is a risk the brand is accepting. Decide whether that risk is acceptable before buying.
Sources
- FTC, Health Breach Notification Rule: The Basics for Business
- NIST Privacy Framework
- HHS, Use of Online Tracking Technologies by HIPAA Covered Entities
External guidance and platform documentation change. Links were current at publication; check them again before relying on them for a decision.
Editorial note. Analysis and frameworks are the author's own and do not represent Acxiom or any current or former employer, client, or named platform. Examples labeled hypothetical or illustrative are not results from real campaigns. Nothing here is legal, regulatory, or medical advice.
Everything in this series
This guide is the entry point. Each article below answers one narrower decision in depth.
Deterministic vs. Probabilistic HCP Identity
Compare deterministic and probabilistic HCP identity by evidence, coverage, error risk, channel, reporting, and campaign use case.
3 min read →Health Data & IdentityHow to Evaluate an Identity Graph for Healthcare Media
An evidence sheet for identity graphs used in healthcare media that separates coverage, correctness, freshness, and fitness for a specific use.
3 min read →Health Data & IdentityHealth Data Provenance: Questions Every Audience Vendor Should Answer
A source-to-segment lineage template and the provenance questions every health audience vendor should answer before a pharma brand buys.
3 min read →Health Data & IdentityHow to Measure Audience Overlap Before Buying More Data
Measure duplication, unique reach, and marginal cost across pharma audience vendors before adding another data partner.
3 min read →Health Data & IdentityConsent, Permission, and Fitness for Use Are Not the Same Thing
A three-gate model for health data in pharma marketing that separates legal permission, contractual permission, and whether a use fits the brand's standards.
3 min read →Health Data & IdentityData Freshness in Healthcare Audiences: How Old Is Too Old?
A change-rate and decision-risk model for setting refresh requirements on healthcare audience data, instead of one universal freshness threshold.
3 min read →Health Data & IdentityHousehold Identity in DTC Pharma: Uses, Limits, and Spillover
When household-level targeting fits DTC pharma, where it fails, and a risk matrix for intended and unintended exposure on shared devices.
3 min read →Health Data & IdentityWhat Interoperability Means in a Healthcare Media Data Flow
The four kinds of interoperability in healthcare media data flows (syntactic, semantic, identity, and operational) and how each breaks.
3 min read →Health Data & IdentityA Health Audience Data Contract Checklist for Marketers
Operational contract questions for marketers buying health audience data, covering permitted use, deletion, audit rights, subprocessors, and measurement. Not legal advice.
3 min read →New pharma programmatic breakdowns, occasionally
One email when I publish something worth reading. Benchmarks, measurement teardowns, and case studies with the caveats attached. No cadence promises, no reselling your address.
Unsubscribe any time. See the privacy policy.
Working through this decision on a real plan?
I work on health and pharma data, identity, and activation, after five years running HCP and DTC programmatic agency-side. Happy to talk through how this applies to your situation.