BillRight Consumer Health Data Privacy Policy
Effective date: November 10, 2026
This policy explains how BillRight handles consumer health data, as Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and Connecticut's Data Privacy Act require. We apply it to everyone who uses BillRight, wherever they live. "BillRight" and "we" mean the company that operates BillRight, named in our Terms and Conditions.
Your bill and EOB can show health information, such as the care you received and the billing codes for it. We collect and share it only with your consent, which we ask for before you upload, using separate checkboxes for collection and for sharing. We never sell consumer health data, and we don't use geofencing.
Health data we collect, where it comes from, and why
We collect health data only to check your bill and write your letters.
If you tap Yes on the optional share card after your free preview, we also keep a copy of every file in that case (the bill and any EOB uploaded with it) for up to 12 months, to improve how BillRight checks bills. This consent is separate from the upload checkboxes and from any purchase, and it is not a condition of using BillRight. The default is still deletion within 24 hours. No thanks or closing the card changes nothing.
| Category | Where it comes from | Why we collect it and how we use it |
|---|---|---|
| Your medical bill and EOB, as files or typed lines | You | To read the charges and check them |
| Details read from them: patient name and mailing address, account and claim numbers, provider, dates of service and hospital stay, billing codes and service descriptions as printed, charges, insurance payments and adjustments | Our automated reading of your files | To find charges worth questioning and write your letters |
| Coverage answers: state, insured or self-pay, plan type | You | To apply the billing rules that fit your coverage |
| Help-paying answers (optional): household size and income range | You | To check whether you may qualify for charity care |
| Your findings and letter text | Created by BillRight from the above | To show your results and give you your letters |
| Copies you opt in to share after the free preview: every file in that case (the bill and any EOB uploaded with it) | You, if you tap Yes on the optional share card | To improve how BillRight checks bills, for up to 12 months |
We keep a small set of counts after deletion, such as which checks found something and your general plan type, with nothing from your bill. How long we keep each item, including optional share copies, is in our Privacy Policy.
Your rights and how to use them
You can confirm, access, delete, and stop the collection or sharing of your health data at any time, at no cost.
- Confirm and access: ask whether we collect, share or sell your health data, and get a copy, with the list of everyone we shared it with and how to contact them.
- Withdraw consent: stop us collecting or sharing your health data. Use "Delete now" or email us. If you tapped Yes on the optional share card, email support@getbillright.com and we will delete those files.
- Delete: "Delete now," on every result page and in every email, deletes your case right away. You can also use the Delete my data page or email support@getbillright.com. We'll tell our processors to delete it too. Deleted data drops out of our backups within 7 days. Our AI providers keep what they read only to detect misuse of their services, and delete it on their own schedule: up to 55 days at Google and 30 days at Anthropic.
- No penalty: using these rights never changes the price or quality of BillRight for you.
How to ask. Email support@getbillright.com with "Health data request" in the subject. Because we don't have accounts, we may ask for your case link, pass code or the email you used, only to confirm the request is yours.
When we answer. Within 45 days. If we need more time, we'll tell you why within those 45 days and finish within 45 more. Requests are free up to twice a year.
Appeals. If we turn down your request, reply to our answer within 30 days to appeal. We'll answer within 45 days and explain our decision. If you're still unhappy, you can contact your state attorney general, such as the Washington Attorney General's office.
Changes and contact
We'll post changes here with a new effective date, and ask for your consent before we collect, use or share health data for any new purpose. Questions: support@getbillright.com.