HIPAA Notice

Our HIPAA-Conscious Design

RememberPills operates as a reminder delivery service, not a healthcare provider or health plan. By design, we minimize the information we collect and store:

• We store your name, email address, and phone number — standard contact information
• We store reminder labels that you choose — these can be anything (e.g., "morning pill," "Metformin," "the blue one"). We have no way of knowing what condition a medication treats.
• We store reminder times and schedules
• We do NOT store diagnosis codes, prescription data, dosage information, medical records, insurance information, or any other Protected Health Information (PHI)

Why This Matters

HIPAA applies to "covered entities" (healthcare providers, health plans, and healthcare clearinghouses) and their "business associates." Because RememberPills does not store PHI in the HIPAA sense — we have no access to medical records, prescriptions, or diagnoses — the HIPAA compliance burden for personal consumer use is minimal.

For Healthcare Providers (Enterprise)

Healthcare providers who use the RememberPills Provider Portal enroll patients with only name, contact information, and a medication label. No clinical data is stored. However, for enterprise accounts requiring a formal Business Associate Agreement (BAA) to satisfy their own HIPAA compliance requirements, we offer this for qualifying partners.

To request a BAA: partners@RememberPills.com

Security Practices

• All data transmitted over HTTPS/TLS encryption
• Passwords stored as bcrypt hashes — never in plaintext
• Payment data handled entirely by Stripe and PayPal (PCI-DSS compliant)
• Database access restricted to application only — no public database exposure
• Regular security updates applied to all server software

Contact

Privacy and HIPAA inquiries: privacy@RememberPills.com