Consumer health data
Consumer Health Data Privacy Policy
Medical bills and Explanations of Benefits are health information. This page sets out how MedBillAnalyzer collects, uses and shares consumer health data, in the form that Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's data privacy act require. It sits alongside our Privacy Policy, which covers everything else.
Effective 27 September 2026.
The consumer health data we collect
- The documents you send. Medical bills, Explanations of Benefits and, where you supply one, a Good Faith Estimate — sent by you, or by an AI assistant you have connected to us, on your instruction. They are read once, in the request that sends them, and never written to disk or to a database.
- What we read off them. Provider name, account and claim numbers, dates of service, billing codes, charges, allowed amounts, what the plan paid, what it says you owe, and whether the provider was in network. Kept for 30 days, then deleted.
- What we conclude. The findings from the check — for example, that a charge appears twice. Kept for 30 days, then deleted.
- That you used this service. Using a medical bill checker, and paying to unlock a result, can itself indicate that you sought health care. We receive a confirmation from Stripe that a payment succeeded and what it was for. We also record how a check reached us — through our website, through Claude, or through our API — and, for our website, the kind of site that sent you there, as one word such as “google”. Never the page you came from or what you searched for. Both are kept with the check for the same 30 days.
- Visits to our public pages. Google Analytics counts visits to medbillanalyzer.com: your IP address, device and the pages you viewed. It is not on the app, and not on any page whose address can carry a check.
There is no field in our system for a Social Security number, a date of birth or an insurance member ID.
Why we collect it, and how we use it
- To run the check you ask for, and to produce the explanation, dispute letter and phone script if you unlock it.
- To take payment, and to honor a membership.
- To delete a check when you ask, and to keep the service secure.
- To count how the service is used, as daily totals — numbers of checks and purchases, and how they reached us — with nothing in those totals that identifies you or your bill.
We do not use consumer health data for advertising, we do not sell it, and we do not use it to train any AI model.
Where it comes from
- From you, when you send a document or enter figures yourself.
- From an AI assistant you choose to connect to us, such as Claude, acting on your instructions. What that assistant does with your conversation is covered by its own terms.
- From Stripe, which tells us whether a payment succeeded.
- From our own processing, which produces the findings.
Who receives it
Only the service providers that run MedBillAnalyzer, each for one purpose:
| Who | Why | What they receive |
|---|---|---|
| Anthropic | Reading your documents | Document contents, with no identifier we add |
| Render | Hosting the app and its database | Encrypted stored data |
| Vercel | Hosting our public web pages | Requests to those pages |
| Stripe | Taking payment | Your payment details, directly — we never hold them |
| Resend | Email: sign-in links, and letters you ask us to send | Your email address and the message |
| Counting visits to our public pages | IP address, device and pages viewed on medbillanalyzer.com |
We share consumer health data with no affiliate. We do not sell it. We do not share it with advertisers, and there are no advertising pixels, tags or tracking scripts anywhere in the app. We do not disclose it to your insurer, your provider, your employer or a debt collector. We would disclose it if legally compelled, and tell you where we are allowed to.
No third party collects consumer health data about your activity over time or across other websites through MedBillAnalyzer. We do not use geofencing.
If we ever wanted to share consumer health data for any purpose not described here, we would ask for your separate consent first. We will never sell it.
Your rights
You can ask us:
- whether we collect, share or sell your consumer health data, and for a copy of it;
- for a list of every third party and affiliate we have shared it with, with their contact details;
- to correct it;
- to delete it — you can also delete a check yourself at any time with the delete code shown when the check is run, and every check deletes itself after 30 days;
- to withdraw any consent you gave.
Email support@medbillanalyzer.com with “Consumer health data request” in the subject. We have no accounts to look you up by, so include the link to the check, or the email address you used, so that we act on your data and no one else's. We respond within 30 days. We will not treat you differently for making a request.
Appeals. If we decline a request, reply with “Appeal” in the subject within 30 days and we will answer within 45 days, explaining our decision. If we deny the appeal, you can contact your state attorney general — in Washington at atg.wa.gov/file-complaint.
Changes and contact
If we change this policy materially, we will update the date at the top, and email account holders before the change takes effect. We will not use consumer health data in a new way without asking first.
RMK Capital, Inc · support@medbillanalyzer.com