Healthcare.gov stores the minimum amount of data?

I would tell you we are storing the minimum amount of data, because we think that's very important. The hub is not a data collector. It is actually using data centers at the IRS, at Homeland Security, at Social Security to verify information, but it stores none of that data, so we don't want to be... -- HHS Secretary Kathleen Sebelius

I have heard some say that Healthcare.gov doesn't contain much personal information. Let's take a look.

The list below contains some of the data items that Healthcare.gov returns to the browser each time a user logs into the system and views their application.

As I haven't yet successfully completed an application due to other issues with the system, I don't know if all of these get populated. The items I have been able to successfully enter into a form and submit do get returned the next time I login.

While a user must login to access this data, this list does give us a hint as to what kind of data might be available to someone who manages to access another's account without authorization.

• absentParentAgreementIndicator
• absentParentIndicator
• absentParentName
• action
• addressPlace
• ageLeftFosterCareCode
• allocatedAPTCAmount
• amountIRSAnnualIncome
• amountSocialSecurityBenefitsIncome
• amountStateQuarterlyIncome
• amountStateUnemploymentIncome
• answerText
• applBirthDate
• applCityName
• applEmailAddress
• applFirstName
• applFullNumberCode
• applicantAge
• applicantPersonInfo
• applicationFamilyGroupTypeCode
• applicationFamilyGroupTypeName
• applicationMember
• applicationMemberAnnualTaxIncome
• applicationMemberAssociation
• applicationMemberAssociationDate
• applicationMemberAssociationEndDate
• applicationMemberAssociationReasonTypeCode
• applicationMemberAssociationReasonTypeName
• applicationMemberAssociationStartDate
• applicationMemberCurrentYearTaxFiler
• applicationMemberCurrentYearTaxFilerTypeCode
• applicationMemberCurrentYearTaxFilerTypeName
• applicationMemberEmployeeTypeCode
• applicationMemberEmployeeTypeName
• applicationMemberEmployerIdentifier
• applicationMemberFamilyTypeCode
• applicationMemberFamilyTypeName
• applicationMemberIdentifier
• applicationMemberIndianStatusDate
• applicationMemberSubscriberTypeCode
• applicationMemberSubscriberTypeName
• applicationMemberTaxFiler
• applicationMemberTaxFilerTypeCode
• applicationMemberTaxFilerTypeName
• applicationSignature
• applLastName
• applMiddleName
• applPersonIdentifier
• applSsnNumber
• applStateCode
• applStreetName1
• applStreetName2
• applSuffix
• applZipPlus4Code
• aptcAttestationIndicator
• aptcAttestationSignatureText
• aptcReferralIndicator
• areaNumber
• assistorOrganizationIdentifier
• attestedAnnualIncome
• attestedApplicationMemberEstimatedIncome
• attestedApplyingForCoverageIndicator
• attestedCaretakerID
• attestedCaretakerIndicator
• attestedChildOfCaretakerIndicator
• attestedImmigrationStatusIndicator
• attestedIRSAnnualIncome
• attestedIRSAnnualIncomeIndicator
• attestedMonthlyIncome
• attestedSocialSecurityBenefitsIncome
• attestedStateQuarterlyIncomeIndicator
• attestedStateUnemploymentIncome
• authorizedRep
• authorizedRepAllIndicator
• authorizedRepReceiveNoticeIndicator
• authorizedRepresentativeIndicator
• authorizedRepresentativePrivilegeTypeName
• authorizedRepSignatureIndicator
• avgHoursPerWeek
• babyDueQuantity
• babyOrAdoptedInHouseholdIndicator
• birthDate
• blindDisabledIndicator
• blindnessIndicator
• calculatedAnnualIncomeVerificationIndicator
• cardName
• caretakerRelativeIndicator
• changeFilingStatusPrompt
• changeInformationAgreementIndicator
• childApplicationMember
• childLivesWithBothParents
• childOfCaretakerRelativeIsEnrolledIndicator
• childOfVeteranIndicator
• citizenshipDocumentAlternateName
• citizenshipStatusIndicator
• cityName
• claimingTaxFilerCategoryTypeCode
• claimingTaxFilerCategoryTypeName
• claimingTaxFilerNotApplicationMemberAssociationReasonCode
• claimingTaxFilerNotApplicationMemberIndicator
• claimsDependentsIndicator
• completeImmigrationInformation
• concurrencyHash
• contactIndicator
• countryCode
• countyFipsCode
• countyName
• coverageEndDate
• coverageEndedIndicator
• coverageInDifferentStateIndicator
• coverageStartDate
• coverageYearAnnualIncomeExpectedToChangeIndicator
• coverageYearDependentIndicator
• coverageYearNumber
• coverageYearTaxHousehold
• coveringInsuranceProductTypeAttestation
• creatingExchangeUser
• creationDatetime
• csrf
• currentDate
• currentYearTaxHouseholdIdentifier
• custodialClaimingTaxFilerIndicator
• custodialParentClaimingTaxFilerIndicator
• dateGainedEligibleImmigrationStatus
• dateLostCoverage
• dateMarried
• dateMoved
• dateOfAdoption
• dateProspectiveLostCoverage
• dateReleasedFromIncarceration
• deceasedIndicator
• definedPersonEthnicity
• definingApplicationMemberContactMethod
• definingCircumstanceChangeAttestation
• definingContactMethodTypeCode
• definingContactMethodTypeName
• definingInsuranceApplicationOriginTypeCode
• definingInsuranceApplicationOriginTypeName
• definingMemberMaritalStatusTypeCode
• definingMemberMaritalStatusTypeName
• definingMemberMedicaidAnchorTypeCode
• definingMemberMedicaidAnchorTypeName
• dependentFilerStateMatch
• dependentIndicator
• deprivedChildIndicator
• dhsNextStep
• discrepantMonthlyIncomeIndicator
• doNotKnowIncomeIndicator
• durationOfMembershipHSM
• edsCalled
• eeAcountUsername
• effectiveDate
• electronicNoticeIndicator
• elephoneCountryName
• eligibilityResultsNoticeUrl
• eligibleESIRetirementCobraParentIndicator
• eligibleImmigrationStatusIndicator
• eligibleITUIndicator
• eligibleNewPlansIndicator
• emailAddressFullText
• emailAddressIdentifier
• emailAddressName
• employerInsurance
• employmentAuthorizationCategoryIdentifier
• enrolledCoverageIndicator
• enrollmentGroups
• enrollmentPeriodReason
• ethnicityTypeCode
• exchangeState
• exchangeUserIdentifier
• exitExpeditedIncomeIndicator
• expectedDeliveryDate
• extensionNumber
• fatherAvgHoursWeek
• federalIndianStatusCode
• federalIndianStatusName
• financialAssistanceIndicator
• firstName
• fixedAddressIndicator
• forwardingPhysicalDocument
• fosterCareEndedBecauseOfAge
• fosterCareIndicator
• fosterCareStateCode
• fromBatch
• ftiUsedIndicator
• fullTelephoneNumberCode
• futureDependents
• genderTypeCode
• goodCauseExemptionIndicator
• goodCauseExemptionText
• greaterThanFPLIndicator
• hadMedicaidDuringFosterCareIndicator
• hash
• hasSpouseIndicator
• hasTaxFilingRequirementIndicator
• healthcareSharingMinistryActiveEndDate
• healthcareSharingMinistryActiveStartDate
• healthcareSharingMinistryCity
• healthcareSharingMinistryCongregation
• healthcareSharingMinistryCounty
• healthcareSharingMinistryDistrict
• healthcareSharingMinistryExistIndicator
• healthcareSharingMinistryName
• healthcareSharingMinistryState
• healthcareSharingMinistryZip
• helpingApplicationAssisterTypeCode
• helpingApplicationAssisterTypeName
• helpingApplicationAssistor
• hispanicOriginIndicator
• hubResponded
• hubTransferAckRequestID
• hubTransferAckStatusCode
• hubTransferTimeStamp
• id
• identifier
• idProofed
• idsCalledCounter
• immigrationVerificationComplete
• impactingMedicaidCHIPIncomeMemberIdentifier
• incarcerationEndDate
• incarcerationStartDate
• incarcerationStatusIndicator
• incarcerationType
• incomeSubjectToFederalRestrictions
• indianStatusEvidenceDocument
• institutionalizedIndicator
• insuranceApplicationTypeCode
• insuranceProductTypeCode
• insuranceProductTypeName
• insuredIndicator
• isDentalPlanPreferred
• isEnrolled
• isIncarcerated
• isMarriedIndicator
• isMultiTaxHouseholdIndicator
• issuingCountryCode
• issuingCountryName
• knownPersonWorkType
• largeAssetIndicator
• lastModifiedBy
• lastName
• lastRecordIndicator
• lawfulPresenceEndDate
• lawfulPresenceStartDate
• lawfulPresenceStatusIndicator
• lineNumber
• livedInUS5YearIndicator
• liveOutsideStateTemporarilyIndicator
• livesWithAdultTaxClaimerIndicator
• livesWithCustodialParentNotApplicationMemberIndicator
• livesWithIndcator
• livesWithMinorAgeDependentIndicator
• livesWithOtherParentNotClaimerIndicator
• longTermCareIndicator
• losingCurrentPlanIndicator
• marriedFilingJointlyIndicator
• maxProposedCoverageEffectiveDate
• medicaidCorrectExchange
• medicaidDeterminationIndicator
• medicaidEligibilityDeterminationDate
• medicaidEligibilityReasonText
• medicaidHousehold
• medicaidHouseholdAnchor
• medicaidRequirementAgreementIndicator
• medicaidStudentResidencyRulesApplies
• medicaidTaxRoleTypeCode
• medicaidUndeterminedFamilyNotProvidedIndicator
• member
• memberAssociationRoleTypeCode
• memberAssociationRoleTypeName
• memberEmployer
• memberEmploymentStatus
• memberEvent
• memberExemptions
• memberIndianStatus
• memberRoleType
• memberSchoolStatus
• memberSignatureText
• memberStatusType
• memberType
• messagePlace
• middleName
• monthlyIncomeGreaterThanFPLIndicator
• motherAvgHoursWeek
• movedFromCountyCode
• movedFromZipCode
• nationalProducerNumber
• needsSeparateApplicationIndicator
• noAPTCTaxFilerNotProvidedIndicator
• noFixedAddressIndicator
• nonCustodialClaimerBothMFSParentsApplyingIndicator
• noncustodialClaimerNonCustodialApplyingIndicator
• nonCustodialParentClaimingTaxFilerIndicator
• nonCustodialParentIndicator
• nonCustodialParentName
• nonEmployerSponsoredCoverageIndicator
• nonESInsurance
• nonParentProvidesPrimaryCare
• notChosenPlanIndicator
• noticeDate
• number
• objectIdentifier
• onlyApplicantIndicator
• optionStudentResidency
• organization
• organizationNomenclatureText
• otherCoverageWithin6MonthsIndicator
• otherEthnicityText
• otherHealthInsuranceIndicator
• otherRaceText
• parentApplicationMember
• parentCaretakerIndicator
• parentOfStudentLivingInStateIndicator
• parentWorkQuartersIndicator
• penaltyOfPerjuryAgreementIndicator
• peopleTakenCareOf
• performVerificationIndicator
• personAddress
• personAddressCategoryCode
• personAddressEndDate
• personAddressRelationshipRoleCode
• personAddressStartDate
• personAmericanIndianAlaskanNativeIndicator
• personCitizenshipStatus
• personEmail
• personEmailEndDate
• personEmailStartDate
• personEmailVerifiedDateTime
• personEmailVerifiedIndicator
• personForWorkQuarterExcludedIndicator
• personIdentification
• personIdentificationEffectiveDate
• personIdentificationEndDate
• personIdentificationOtherTypeText
• personIdentificationType
• personIdentificationTypeCode
• personIdentificationTypeName
• personIdentificationUpdateQuantity
• personIdentificationValueText
• personIdentifier
• personIdentityProofingEventSourceTypeCode
• personIDProofingEvents
• personIDProofingEventTask
• personName
• personRace
• personRecognizedTribeIndicator
• personSSN
• personTelephone
• personTelephoneCategoryCode
• personTelephoneEndDate
• personTelephoneRelationshipRoleCode
• personTelephoneStartDate
• personTrackingNumber
• personTypeCode
• phoneNumber
• physicalDocumentTypeCode
• physicalDocumentTypeName
• placeRelationshipRoleCode
• planSelectButtonStatus
• postalStateCode
• potentialSeasonalWorkerIndicator
• pregnancyIndicator
• preliminaryChildOfCaretakerRelative
• preliminaryParentCaretakerRelative
• priorInsuranceEndDate
• priorTo1956Indicator
• privacyPolicyAgreementIndicator
• promptParentAddressCount
• promptSpouseAddressCount
• proofingEsdEngagedIndicator
• proofingEventBarcodeIdentifier
• proofingEventDate
• proofingEventRidpSessionIdentifier
• proofingEventSuccessIndicator
• proposedCoverageStartDate
• proposedSEPCoverageEffectiveDate
• provideAbsentParentInfoIndicator
• providedInsuranceApplicationSecurityQuestionAnswer
• provideOtherSSNAgreementIndicator
• qhpCorrectExchange
• qualifyPlanSelectIndicator
• questionAnswerAssignedDateTime
• receivedCurrentIncomeSourceAttestation
• receivedIndianHealthServicesIndicator
• receiveITUIndicator
• receiveNotificationIndicator
• recentlyUnemployedIndicator
• recentlyUnemployedStartDate
• registerToVoteIndicator
• relationshipNameText
• relationshipToTaxFilerTypeCode
• requestingCoverageIndicator
• requestingCoverageMemberQuantity
• requestingDentalCoverageIndicator
• requestingFinancialAssistanceIndicator
• residencyEndDate
• residencyStartDate
• residencyState
• residencyStateList
• residencyStatusIndicator
• resideTogetherIndicator
• resideWithCustodialParentExcludedIndicator
• returnToValidateAnnualIncome
• reuseTaxDataPermissionIndicator
• salutationName
• sameNameIndicator
• sameSexSpouse
• saveVerifiableStatus
• seasonalWorkerIndicator
• selectedInsuranceApplicationSecurityQuestionTypeCode
• selectedInsuranceApplicationSecurityQuestionTypeName
• serviceAreaChangeIndicator
• sevisIDIndicator
• signatureDate
• signatureEmployeeTypeName
• signatureName
• signatureTypeCode
• skipIncomeInfoIndicator
• soleIncomeApplicationIndicator
• specialRuleForTaxHouseholdApplies
• spokenLanguage
• spouseHouseholdMemberIndicator
• spouseInHouseholdIndicator
• spouseOfVeteranIndicator
• spouseWorkQuartersIndicator
• ssnAlternateName
• ssnIDSConfirmed
• stateCode
• stateEmployeeChildIndicator
• stateHealthBenefitAvaliableIndicator
• stateHealthBenefitOfferedIndicator
• statusIDSConfirmed
• streetName1
• streetName2
• studentIndicator
• studentParentInStateIndicator
• studentResidencyAgeThreshold
• submissionDatetime
• subordinateMember
• subscribedInsuranceProductTypeAttestation
• suffix
• suffixName
• superordinateMember
• supportingPhysicalDocument
• switchNumber
• systemUserIdentifier
• systemUserLoginName
• systemUserName
• taxFilerIndicator
• taxFilingStatusChangeIndicator
• taxFilingStatusTypeCode
• taxHouseholdEscMecVerification
• taxReturnFilingStatusTypeCode
• taxReturnFilingStatusTypeName
• taxYear
• telephoneCountry
• telephoneCountryCode
• telephonePlace
• tobaccoLastUsed
• tribalAmount
• tribeCode
• tribeName
• tribeStateCode
• unpaidBillIndicator
• userLastModifiedDateTime
• usMailIndicator
• validatingAddressStatusType
• veteranIndicator
• withdrawApplicationIndicator
• writtenLanguage
• zipPlus4Code

Given the sheer volume of personal information to which Healthcare.gov at least has access, security should be made a top priority.