Is Sharecare HIPAA compliant?

Yes. When accessing Sharecare whether directly or through your employer, health plan, or another program sponsor, we handle your protected health information in accordance with HIPAA, acting as a business associate under the law. We also comply with the HIPAA security rule and use industry-leading security practices, including ISO 27001 and HITRUST.

HIPAA is only part of the picture. Our privacy policy governs everything we collect and how it is used, and our Consumer Health Data Privacy Policy adds protections for health information covered by state consumer health data laws. For AskMD, a dedicated health data privacy notice explains exactly how your health information is handled, and you review it when you sign up.