Privacy in plain language
You can use our public guides without an account. We don't sell patient data or give funders priority in your results.
Don't enter your Social Security number, insurance ID, or full medical records in a question or message. The site is not a secure medical messaging service.
What stays on your device?
Location, language and some tool drafts and preferences may be remembered in your browser. The homepage's “What happened?” text is not saved or sent with Start: only a broad help category goes to the Navigator. Other tools work differently, so check their notices before entering information.
What can be saved online?
When you use a signed-in account, your profile, saved cases, insurance information, uploaded documents and saved letters may be stored to let you return to them. Some signed-in chat features save conversation history, and submitted feedback may be stored. Insurance numbers may be stored in full even when only their last four digits appear on screen. Don't assume a chat disappears when you close it.
What happens when you ask AI?
The question and relevant context are sent to an AI service to generate an answer. That service must receive the text to answer. AI can make mistakes: verify advice, deadlines and coverage with your provider, insurer or the linked official source. We have not verified every AI provider's retention or training settings, so we cannot promise that those services keep nothing or never use inputs for training.
What about visits and outside links?
We record basic first-party usage signals, such as pages visited and time spent, to understand whether the site helps. Usage records can include a browser identifier and, when signed in, your account identifier. Security and abuse-prevention records may include technical details or a hashed IP address. These are not a place for medical details. Official websites, maps, payment services and your email app have their own privacy rules when you open them.
What does the Contact form store?
Its text stays in the form until you open an email draft. It is not submitted to our servers by the form. Your email app receives the draft, and the site inbox receives it only if you send it. Ordinary email is not a secure channel for medical records.
How can I manage my information?
The account erasure control attempts to remove saved patient records and clear health and insurance fields; it keeps your sign-in account and contact details. It does not establish that every log, backup or outside-service copy is erased. Clearing browser storage removes local drafts and preferences, not online records. Recent runs of the scheduled cleanup have failed, so automatic deletion after a fixed period is not currently verified. Contact us to request account deletion or confirm what remains, without including medical details.