Privacy
Your medical bills are personal. Here is what we collect, how we protect it, and how you can delete it.
What we collect
- Your email address, so you can sign in.
- The bill files you upload (photos or PDFs), only until we read them.
- What we read from your bill: hospital, dates, charges, billing codes, totals, and only the last 4 digits of any account number.
- What you add: household size and income (optional), notes, letters, offers, and deadlines.
- Payment records if you buy a plan. Card details are handled by our payment provider, not stored by us.
We never ask for your Social Security number, date of birth, diagnosis, or full account number.
Your images are deleted after reading
We delete uploaded images and PDFs as soon as we've read them, and always within 24 hours of upload, even if reading fails.
How we protect your data
Your data is encrypted in transit (HTTPS) and at rest. Files are kept in private storage and only shown to you through links that expire after 60 seconds. Only you can see your bills.
We don't sell your data
We do not sell or rent your information. If you tell us your final bill amount, we only include it in overall statistics if you check the box allowing it, and never with your name or bill details.
How to delete your data
Go to Settings → Your data. You can download a copy of your data, delete a single bill, or delete everything. Deleting everything removes your account, bills, files, and notes, and cancels any subscription.
We keep payment records only as required for accounting, with no link to any bill. Our activity log keeps only action names (like "account deleted"), never bill details.
Our status
Hospital Bill Negotiate is not a health care provider or health plan, and we don't claim HIPAA compliance. We still treat your bill information with care, as described above.