Is Ambience Healthcare safe with your data?

Training use is unaddressed

Neither the privacy policy nor the terms of service say whether recordings, transcripts or clinical notes are used to train or improve models, and no opt-out or opt-in mechanism is offered. The terms do reserve the right to retain and use de-identified data "without restriction for any purpose," including improving the Services.

No retention period or deletion timeline

The policy commits only to not retaining information "longer than needed," with no number of days, months or years, and sets no timeline for deleting data after an account closes. It also warns of "technical or other operational reasons where we are unable to delete or de-identify your information."

Rights are listed, not operationalised

Access, deletion, portability, correction and sale opt-out appear as a bulleted list of state statutory rights exercised by emailing a general address, with the response window left to "the time period required by applicable law" rather than a stated deadline.

Security described in categories only

Protection is summarised as "administrative, physical, and technical security safeguards" with no encryption standard, access-control model, named certification such as SOC 2 or ISO 27001, or breach-notification commitment, despite the platform handling patient information under HIPAA.