Privacy & Security FAQ

What kind of information will Human API have access to?

The information contained in your connected data sources varies by type and provider. Typically, healthcare provider Electronic Health Record (EHR) systems contain details on office visits, conditions, medications, test results, immunizations, and other information relevant to medical evaluation, diagnosis, treatment plans.  

You can confirm the information Human API will have access to by visiting your provider's online patient portal. Any information you have access to or can download from your provider's patient portal, Human API can access as well.

Is my data secure with Human API? 

Human API is HIPAA-compliant service, meaning it meets or exceeds U.S. government standards for medical data security, akin to those employed by national banks. More information about our Security measures can be found on our Security page or in our full Security Policy.

Who has access to my data and for how long?

The philosophy behind Human API is that you, the consumer, are always in control of your data. Therefore, Human API will never share your data with any other party unless you explicitly instruct us to do so.

By authenticating your provider(s) through the Human API connect process on behalf of an insurance provider, medical research facility, digital health application, or other third party organization, you are explicitly authorizing Human API to retrieve your health data and make it available to the indicated party. 

Can I revoke access?

Yes, you can disconnect your data at any time by submitting a Privacy & Security support form and requesting to have your account terminated and data disconnected. 

We will close your account and delete the Personal Information within your account within thirty (30) days of our receipt of your request. Please note that deletion of Personal Information within our Services does not include any information that you previously provided to a third party through our Services or research that you consented to participate in. You must contact third parties separately regarding controls and choices for the personal information that you shared. We cannot remove personal information from ongoing or completed studies that use this information.

As stated in our Terms of Service, we may retain your personal information in backup copies as required by law or contractual obligations with third parties. We may also retain de-identified personal information, and limited account registration information needed for accounting, audit, and compliance purposes.

How can I contact a support agent with further questions?

Ensuring data privacy and security is Human API's top priority, as we know how important it is to our customers and users alike. We encourage you to reach out with any questions.

For the fastest response, please submit a Privacy & Security support request form. An agent will reach out within 48 hours to address your inquiry. 

Looking for more information?

For more information about Human API security and privacy, we recommend that you visit the Security page on our main website or read our full Security Policy.