How does Sharecare protect my health information?

Your information is protected with the practices regulated healthcare requires: encryption, restricted access, and security programs aligned to ISO 27001 and HITRUST, with full compliance with the HIPAA security rule. Protecting your information is our highest priority, and it has been built into how Sharecare works from the beginning.

Concretely: we encrypt our services, restrict access to personal information to the employees, contractors, and agents who need it to serve you (all bound by strict confidentiality obligations), and regularly review our collection, storage, and processing practices, including physical security. Personal information for U.S. programs is stored on servers in the United States, and we retain it only as long as required, with data destroyed when no legal or contractual requirement applies.

In AskMD, protection extends to identity itself. We partner with CLEAR to verify that your records connect to you and only you. CLEAR manages identity verification under its own privacy policy; AskMD never receives or stores your biometric data, only confirmation that your verification succeeded.

If you ever spot something concerning, contact our privacy team at privacy@sharecare.com, and we will respond promptly.