HIPAA + Data Handling
MedDO is a study tool for people preparing for licensure exams. This page explains how HIPAA relates to MedDO, and how we handle and protect the information you give us.
Last updated:
What HIPAA covers
HIPAA, the US Health Insurance Portability and Accountability Act, protects patients’ health information held by healthcare providers, health plans, healthcare clearinghouses and the businesses that work on their behalf.
Where MedDO fits
MedDO doesn’t provide, arrange or pay for healthcare, and it isn’t designed to hold patient records. The information you give MedDO is about your studying: your account, your answers and your progress. It is not patient health information, so it is protected by the commitments in our Privacy Policy rather than by HIPAA.
Never enter real patient information
The patients in MedDO’s questions are fictional. Never type real patient information into MedDO, including in AI Tutor messages, question reports or questions you create. That means names, dates of birth, record numbers, photos or anything else that could identify a real person.
If you are on a clinical placement, follow your program’s and your clinical site’s rules about patient information.
How we handle your data
- In transit: information travels between the app and our servers over HTTPS.
- At rest: our database provider encrypts the data it stores.
- Passwords: stored only in hashed form, so we can’t read them.
- Access: student information is available only to the members of the MedDO team who need it to run and support the service.
- Service providers: each receives only what it needs for its part of the service. The full list is in our Privacy Policy.
- No selling, no advertising: we don’t sell your information or use it for advertising.
If something goes wrong
If we learn of a security incident that affects your information, we will notify you as the law requires.
Contact
Questions about how we handle your data: privacy@meddoapp.com.