Patient.com logo

Partners

Resources

Company

Contact

Log in
Partners

Resources

Company

Contact

Log in

Patient.com Privacy Policy

Effective/Last Updated Date: September 25, 2026

Patient.com (“Patient.com,” “we,” “our,” or “us”) provides personal health application services for patients. These services include the collection and organization of certain medical and health records from you and others on your behalf to allow you to access, control, and organize your health information, and to facilitate related functions that support your use of the Services (defined below).

In this Privacy Policy (“Policy”), we describe how Patient.com processes the personal information that we obtain about visitors to our website where this Policy is posted, including www.patient.com (the “Site”), users of our mobile application (the “App”), and individuals who communicate or otherwise interact or engage with us or the services we make available to you, (collectively, the “Services”).

If you are a resident of Washington, please refer to our Washington Consumer Health Data Privacy Policy for additional information about the “consumer health data” we process about you and the rights you may have under Washington law. If you are a resident of Texas, please refer to our Privacy Statement for Texas Residents for additional information about how we process personal information about you and the rights you may have under Texas law.

 

By visiting the Site, using or downloading the App, or using any of our Services, you agree that your personal information will be handled as described in this Policy. Your use of our Services is subject to this Policy and our Terms of Service. Our Terms of Service are incorporated by reference into this Policy.

We note that at this time, Patient.com is not a covered entity or a business associate of a covered entity as defined under the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations (“HIPAA”). Accordingly, the personal information we collect, disclose, and otherwise process as described in this Policy is not considered “protected health information,” as defined in HIPAA. Patient.com is a consumer personal health application regulated by the U.S. Federal Trade Commission (“FTC”). When we receive your information from a HIPAA-covered provider or health plan/insurer at your direction, HIPAA no longer governs our use of that information.

For more information about our privacy practices, you may contact us as set forth in the Contact Us section below.

Additional Notices. Depending on how you interact or engage with us, we may provide you with additional or supplemental privacy notices with additional details about our privacy practices. These additional notices will control to the extent there is a conflict with this Policy, with respect to your personal information that is subject to that additional notice.

Personal Information We Collect

We may collect personal information about you from you, your devices, third parties, and through your use of our Services. The personal information we may collect varies depending upon your use of our Services and our interactions with you.

Personal Information We Collect From You. The personal information we collect from you depends on how you use our Services. You are responsible for the accuracy of any information you provide to us and for obtaining permission from any emergency contacts for the use of their personal information.

  • To create an account, we and our service providers may collect your name, gender, date of birth, email, address, phone number, an image of your driver’s license, government ID, or other identification, and health insurance card information as well as other information to verify your identity such as Social Security number and address/previous address(es). Additional personal information including demographic information such as ethnicity, race and sexual orientation, employer, pharmacy, emergency contact, and health information or records that you provide directly to us through use of the Services may also be collected.
  • When you use our Services, we may collect health information from your medical information including medical history, conditions, medications, allergies, lab results, imaging, immunizations, device data, clinical notes, appointment information (e.g., date, time, provider, location), and visit summaries. We may also collect documents and forms you execute in-App such as registration packets and consents, as well as your preferences, including communications preferences, preferences related to your use of our Services, and any other preferences or requests you provide when interacting with us.
  • When you communicate with us, we may maintain records of your communications including support requests, feedback, and preferences.
  • If you make a purchase, we may collect your billing and shipping address and will work with our third-party processor to collect your payment information, such as your payment card information.
 

Personal Information We Collect From Other Entities. Depending on the Services you request, we may collect personal information, including health information and records about you from third-party sources. We may also collect information about you from public records and other sources. As directed by you, we may receive information about you such as patient identifiers and other health record information from health care providers, health plans/insurers, credit reporting agencies, Qualified Health Information Networks, Health Information Exchanges, health care clearinghouses, or similar intermediaries, and other third-party data providers, as well as public health authorities and other sources you instruct us to contact. We may combine the information that we receive from third-party data sources with other information that we collect. We are not responsible for the accuracy of information provided to us by third parties.

Personal Information We Collect Automatically. We automatically collect personal information and other information about your use of our Services through cookies, web beacons, and other technologies, including technologies designed for mobile apps. For example, we may collect browser type and operating system; pages viewed; links clicked; IP address; campaign, referral-source, and similar marketing attribution information; unique user or browser identifiers; device name, model and attributes; operating system type, name, and version; language information; activities and the length of time that you are logged in; and general location information. For example, we may collect location information through the App to provide you with local information, such as local providers and services. You may adjust this feature through the location settings on your device. Please see the “Cookies and Other Tracking Mechanisms” section below for more information.

How We Use Personal Information

We may use your personal information for the following purposes, such as:

  • To provide our Services to you and to fulfill your purchases or requests, such as, pre-registration; appointment information and health related communications; refill reminders; medical billing; drug and medical device safety; opportunities to participate in clinical trials; precision medicine (e.g., personalized information related to your health care and treatment); scheduling requests; and similar administrative communications.
  • To provide data integrity and for fraud/identity protection, we may use automated systems to periodically check your demographic and insurance information against external data partners (e.g., FinThrive, insurance eligibility tools, etc.) and will notify you of discrepancies that require correction.
  • For identity matching using appointment details (e.g., name, date of birth, sex, and address) and for ongoing syncing with health care providers.
  • To communicate with you about your use of our Services, including via phone, email, or text message, to respond to your inquiries, and for other customer service purposes, including marketing communications in accordance with applicable law and your communications preferences.
  • To tailor the content and information that we may send or display to you, to offer personalized help and instructions, and to otherwise personalize your experiences while using the Services.
  • To show you resources inside the App such as cost-savings programs, debt-assistance resources, and in-network options.
  • To better understand how users access and use our Services, both on an aggregated and individualized basis. For example, we may evaluate the onboarding progress, navigation paths, workflows, feature usage, and other interactions with the Services to provide onboarding support, identify and resolve technical issues, and improve the functionality, performance, and user experience of the Services.
  • To understand how users find, access, and engage with our Services; evaluate the effectiveness of our marketing activities; and measure user journeys, engagement, and other outcomes associated with particular campaigns, referrals, or sources.
  • To provide and personalize our Services through AI-assisted processing. For example, we may use AI-enabled tools to review and analyze health records, claims information, registration materials, and other health-related documents to help organize information, identify relevant content, generate summaries, support administrative workflows, and provide insights and recommendations within the Services. We may also use information processed through these tools to develop, train, test, validate, improve, and monitor our AI-enabled technologies and related Services, subject to applicable law and contractual commitments.
  • For internal research and analytics purposes, including product analytics, service-performance measurement, and marketing attribution.
  • To improve the quality of our Services including onboarding, functionality, performance, and user experience.
  • To comply with legal obligations, as part of our general business operations, and for other business administration purposes.
  • Where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud or security issues, situations involving potential threats to the safety of any person or violations of our Terms of Service or this Policy.
  • For other purposes that you are notified about or that you approve.
 

Deidentified or Aggregated Information. We may also process personal information in an aggregated or deidentified manner for purposes such as research, analysis, modeling, marketing, and improvement of our Services. Where we use, disclose or otherwise process deidentified data, we will maintain and use the information in deidentified form and not attempt to reidentify the information, except in order to determine whether our deidentification processes are reasonable and adequate pursuant to applicable privacy laws.

How We Disclose Personal Information

We may disclose personal information in the following circumstances:

  • Health care providers and health plans/insurers. We may disclose personal information to health care provider(s) and health plans/insurers when providing Services to you. For example, we may send your registration forms, insurance details, or records, which may include images of your ID or insurance card. These images are OCR-processed and extracted data (e.g., name, member ID, and plan details) may be disclosed to your health care providers. Once the provider or plan collects your personal information, that recipient’s own privacy practices will apply.
  • Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. As part of the business transfer process, we may share certain personal information with lenders, auditors, and third-party advisors, including attorneys and consultants.
  • Service Providers and Vendors. We may disclose your personal information to service providers and vendors such as web hosting, cloud, security, e-signature, product analytics, identity-verification, onboarding, marketing measurement, customer-relationship-management, communications, and AI technology providers as well as health care clearinghouses and integration vendors that route appointments and deliver pre-registration packets or otherwise perform functions on our behalf to operate the Services.
  • Advertising, Analytics, and Measurement Providers. We may disclose personal and other information to advertising, analytics, and measurement providers. These providers help us measure activity, understand how users reach and interact with the Services, evaluate the effectiveness of our marketing activities, and, where permitted, support advertising activities. The information disclosed depends on the technology involved and your applicable privacy choices.
  • In Response to Legal Process. We may disclose your personal information as permitted to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena.
  • To Protect Us and Others. We may disclose your personal information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud or security issues, situations involving potential threats to the safety of any person, violations of our Terms of Service or this Policy, to protect our rights and the rights of users and others and as evidence in disputes or litigation in which we are involved.
  • At Your Initiation, Upon Notice, or with Your Approval. One of the benefits of our Services is that you are able to send your personal information to other individuals and entities. When you decide to share your information, this Policy will not apply to the recipient, which may have different privacy and security policies. Before deciding to disclose or approve the disclosure of your personal information, we encourage you to review the privacy policy, if any, of the recipient.
 

Notwithstanding the foregoing, mobile information, including phone numbers and SMS opt-in consent data, will not be shared with third parties or affiliates for marketing or promotional purposes without your express consent.

Cookies and Other Tracking Mechanisms

We use cookies, pixels, log files, storage objects, and other tracking mechanisms to automatically collect information about your use of the Services. We may also engage third parties or service providers to collect such information on our behalf. We may combine this information with other personal information we collect about you or receive from analytics companies and measurement providers. We use this information to, for example, analyze and understand how users reach, access, use, and interact with our Services; identify and resolve bugs and errors; perform internal attribution and measurement; secure, protect, optimize, and improve the performance of our Services, as well as for marketing and analytics purposes, and to personalize content in our Services. To manage your preferences regarding cookies and other tracking mechanisms within our Services, please see the What Choices Do I Have Regarding Use of My Personal Information? section below.

Cookies. Cookies are alphanumeric identifiers we transfer to your device’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within the Services.

Pixels. Pixels (also known as “web beacons” or “GIFs”) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users and help us manage content and compile usage statistics. We may also use these in HTML e-mails we send to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded.

Software Development Kits (SDKs) and Application Programming Interfaces (APIs). SDKs and APIs are pieces of code provided by third parties (e.g., analytics and integration providers) in connection with our Services. They may collect and analyze certain device and user data, which may include personal information.

Third-Party Analytics and Measurement. We and other third parties use analytics and measurement trackers to evaluate the use of our Services. These third-party analytics companies use cookies, pixels, and other tracking technologies to collect usage data to provide us with reports and metrics that help us analyze, improve, and enhance performance and user experience. For example, we may use Google Analytics on our Site. You can learn more about how Google uses your information at www.google.com/policies/privacy/partners (“How Google uses information from sites or apps that use our services”). You can also download the Google Analytics Opt-out Browser Add-on to prevent your information from being used by Google Analytics at tools.google.com/dlpage/gaoptout. We may also use other third-party tools on our Site.

Our Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

Security of Personal Information

We have implemented measures designed to protect the personal information we collect from loss or misuse. Please be aware that despite our efforts, no data security measures can guarantee security.

You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a unique and robust password for every account that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.

 

What Choices Do I Have Regarding Use of My Personal Information?

Cookies and Similar Technologies. You may manage your preferences for nonessential cookies and similar technologies through the Your Privacy Choices link available on the Site. Where required by applicable law, we will not activate certain analytics, advertising, or measurement technologies unless and until you provide consent. You may use the same link to change or withdraw your preferences for future collection and disclosure through those technologies. Changing your preferences will not affect processing that occurred before the change. Some cookies and similar technologies are necessary for the security, operation, or functionality of the Services and cannot be disabled through the preference tool.

Consent. We request your consent to disclose your personal information to your health care provider for pre-registration purposes. We also request a HIPAA authorization from you in order to collect your Protected Health Information (as defined by HIPAA) from HIPAA-covered persons and businesses. You can withdraw your HIPAA authorization by emailing privacy@patient.com. Where we rely on your consent for another particular processing activity, you may withdraw that consent through the method described when consent is requested or by contacting us at privacy@patient.com. Withdrawal will apply prospectively and will not affect processing that occurred before withdrawal.

Account and Profile Information. You may access and update certain personal information via your account information or settings directly within our Services.

Email Communications. We may send periodic promotional emails to you. You may opt out of promotional emails by following the opt-out instructions contained in the email. If you opt out of receiving promotional emails, we may still send you operational emails about your account or any services you have requested or received from us.

Push Notifications. You can opt out at any time by adjusting your device settings, or uninstalling our App. Notification frequency may vary based on the Services.

Text Messages. You can opt out of text alerts any time by replying “STOP,” or any alternative keyword we’ve shared with you. After you opt out, we may send you a one-time confirmation text. For help, reply HELP or contact us at privacy@patient.com. Message and data rates may apply.

Do Not Track and Preference Signals. Some browsers include a “Do Not Track” (DNT) setting that can send a signal to the websites you visit indicating you do not wish to be tracked. Our Site does not respond to browser DNT signals. Where required by applicable law, we process recognized universal opt-out preference signals, such as the Global Privacy Control, as requests to opt out of sale or targeted-advertising processing for the browser and device through which the signal is communicated.

Mobile Device Controls. iOS and Android operating systems provide settings that may allow you to manage certain device permissions and identifiers. The controls available to you depend on your device and operating system.

 

Minors

Our Services are not designed for minors and we do not knowingly collect personal information from individuals under the age of eighteen (18). If we discover that a minor has provided us with personal information in violation of applicable law, we will delete such information from our systems. If you are a parent or legal guardian and you believe we have collected your minor’s information in violation of applicable law, please contact us.

 

Changes to this Policy

This Policy is current as of the Effective Date set forth above. We will post any changes to this Policy on our Site and Application. If we make material changes to how we collect, use, or disclose the personal information we have previously collected about you, we will endeavor to provide prior notice, such as by emailing you or posting prominent notice on our website or within the Services.

 

Contact Us

If you have questions about the privacy aspects of our Services or would like to make a complaint, please contact us at privacy@patient.com.

 

Privacy Statement for Texas Residents

This section applies to Texas residents whose personal information is processed by Patient.com pursuant to the Texas Data Privacy and Security Act (“TDPSA”). If you are not a Texas resident, this section does not apply to you.

The purpose of this section is to supplement our Policy and provide additional information relevant to Texas residents. This section should be read in conjunction with our Policy.

If you are a Texas resident, you can exercise your right to confirm whether we are processing your personal data, and to access that data including in a portable format if the data is available in a digital format; correct inaccuracies; and delete your personal data under Texas law by emailing privacy@patient.com or filling out our webform at: https://www.pages.patient.com/privacy-request. If we decline to take action on your request, you may appeal our decision by emailing privacy@patient.com with “Privacy Appeal” in the subject line. We will respond to your appeal as required by applicable law.

You can also exercise your right to opt out of the sale or processing of your personal data for targeted advertising via the Your Privacy Choices link in the footer of our website. In addition, our website responds to Global Privacy Control—or “GPC”—signals, which means that if we detect that your browser is communicating a GPC signal, we will process that as a request to opt that particular browser and device out of the sale of personal data and processing of personal data for targeted advertising through cookies and similar technologies, to the extent required by applicable law.

Note that if you come back to our website from a different device or use a different browser on the same device, you will need to opt out (or set GPC for) that browser and device as well. More information about GPC is available at: https://globalprivacycontrol.org/.

We will fulfill each request to the extent required by law. You can contact us with any questions or comments about this Policy or about how we handle your personal information by sending our privacy team an email at privacy@patient.com. Patient.com does not discriminate or retaliate against Texas residents for exercising their privacy rights.