One Medical (Amazon)

What this pass recorded. Nothing confirmed this pass. The finding is the ownership: One Medical is a primary care provider owned by Amazon, which means a company whose core business is retail, advertising and cloud infrastructure now operates clinics holding actual medical records. Amazon has stated health data is walled off from its commercial operations, and HIPAA does apply to the clinical entity - both of which are real constraints worth recording. The residual concern is structural rather than accusatory: the wall is a corporate policy and a compliance boundary, not a technical impossibility, and its durability depends on decisions members have no visibility into.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass — standard binding arbitration + class action waiver expected.

Data sharing

Not independently confirmed this pass with a specific named data-privacy lawsuit or breach since Amazon's 2023 acquisition; as an AMAZON-OWNED healthcare provider, One Medical's patient health data sits within the same broader corporate ecosystem as Amazon's general e-commerce/Alexa/advertising operations (documented extensively elsewhere in this tracker, Consumer Apps tab), raising a structural question about how thoroughly patient health data is walled off from Amazon's advertising business.

Contacts

Privacy contact. Not verified this pass — Amazon routes privacy requests through its in-account privacy portal

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. PARENT ADDRESS ONLY — verify before using for legal notice. 1Life Healthcare, Inc. (One Medical) is a San Francisco-headquartered subsidiary and a HIPAA covered entity in its own right. Parent: Amazon.com, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, USA