This is a critical deficiency. Merz explicitly reserves the right to change these terms at any time without notice. The burden is placed entirely on users to periodically check for changes. This violates the Douglas v. Talk America principle that posting changes online without active notice is insufficient. Merz provides no opportunity to reject changes, no exit rights, and no refunds for users who disagree with modifications. Such unilateral modification rights can render the entire agreement illusory under common law principles.
Merz claims comprehensive ownership and control over user-generated content. Users grant Merz an 'absolute and continuous authority' to use any transmitted information for any legal purpose without compensation. The company can block or remove user content at sole discretion. While Merz positions itself as a passive conduit, it reserves extensive rights to control, display, and repurpose user content while users retain theoretical ownership but lose practical control.
Merz requires accurate account information and gives itself clear termination rights, but provides no meaningful due process. The company can suspend or terminate your account at sole discretion with no notice period, explanation, appeal process, or opportunity to cure violations. There is no mention of data export or preservation rights, and the threat of permanent future access denial ('refuse any and all current or future use') is unusually harsh.
This is a critical risk. Merz requires users to indemnify and hold harmless the company, its clients, agents, service providers, licensors, partners, and all their respective officers for essentially any claim arising from use of the site. The trigger is extremely broad - mere use or misuse, not just wrongful conduct. Merz controls the defense at the user's expense, and users pay for Merz's legal fees. There is no reciprocal indemnification from Merz to users. This one-way, uncapped indemnification is the worst provision in these terms.
These terms lack specific privacy protections and instead defer to an external Privacy Policy not included in this document. The terms state that Merz treats most information submitted as non-confidential and can use it for any legal purpose. While the company acknowledges COPPA requirements for children under 13, there are no visible data security commitments, encryption standards, or breach notification procedures. The reliance on an external privacy policy and broad statement that personal information is non-confidential creates significant privacy risk.
Merz chooses North Carolina law and exclusive venue in Guilford County, North Carolina courts. While the company does NOT require arbitration or impose class-action waivers (which is favorable), the exclusive forum selection is problematic for out-of-state consumers. The one-year statute of limitations is shortened. The preservation of court access and absence of arbitration clauses are consumer-protective, but geographic inconvenience and shortened claim deadline are significant drawbacks.
Merz imposes an unreasonably low $100 liability cap and blanket disclaimers of all warranties. The company explicitly disclaims indirect, special, incidental, and consequential damages, and attempts to avoid responsibility for third-party content and user-to-user harm. While the all-caps formatting makes the disclaimers conspicuous and the company acknowledges that some disclaimers may not be enforceable, the $100 cap is shockingly low for a healthcare-related website and violates consumer protection principles.
Merz clearly establishes an 18-year-old age requirement and US-resident-only scope, with explicit acceptance acknowledged through continued use. However, the agreement contains a critical red flag: it explicitly states that Merz can change these terms at any time without notice, placing the burden on users to periodically review for changes. This unilateral modification right without notice violates best practices and creates an illusory contract problem.