BillMeLess is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). We implement all required administrative, physical, and technical safeguards to protect your Protected Health Information (PHI). Our platform uses end-to-end encryption, secure authentication, and strict access controls to ensure your medical data remains confidential.

When you upload medical bills, they are processed within a secure, HIPAA-compliant environment. Our AI analysis system operates with strict access controls and data anonymization techniques. All medical information is encrypted using AES-256 encryption both in transit and at rest, ensuring your sensitive healthcare data remains protected.

Only authorized personnel with specific training in healthcare data privacy have access to your medical bill information. We maintain detailed audit logs of all data access and provide you with full control over your information. You can request access, corrections, or deletion of your medical data at any time.

We collect only the medical bill information you provide, including bill details, provider information, and service dates. We do not collect or store your complete medical history or other healthcare records.

Your medical bill data is used solely for AI-powered analysis to detect errors and overcharges, and for our expert negotiation services. We never sell, share, or use your medical information for marketing or other purposes.

We may share your medical bill information only with healthcare providers and insurance companies during the negotiation process, and only with your explicit consent. We never share your data with third parties for marketing or other purposes.

We retain your medical bill data only for as long as necessary to provide our services and comply with legal requirements. You can request deletion of your data at any time, and we will securely remove it from our systems.

You have the right to access, correct, or delete your medical data. You can also request a copy of your data or restrict how we process it. Contact us to exercise any of these rights.