I was unhappy that CVS sent me promotional snail mail based on my prescriptions, but I don't know what I can do about it, since I assume they have lawyers that told them it was legal under HIPAA.

I also get text messages from them that have links that may or may not allow the retrieval of health information, which also bugs me inasmuch as there's no way to opt out (at least not without ending all text messages).