Consumer Health Data Privacy Policy

Consumer Health Data Privacy Policy for Advicey.com (version 2.3, October 2026). Information that identifies or could be linked to you and describes your past, present or future physical or mental health: injuries, symptoms, conditions, treatment, diagnosis, medications, or the fact that you…

1. What counts as health data

Information that identifies or could be linked to you and describes your past, present or future physical or mental health: injuries, symptoms, conditions, treatment, diagnosis, medications, or the fact that you sought care. It includes the injury and treatment answers in our case forms. We do not collect medical records, images of injuries, lab results, genetic or biometric data, or precise location.

2. We are not your health care provider

Advicey is not a doctor, hospital, insurer or other HIPAA covered entity, and HIPAA does not apply to the details you type into Advicey. This policy, state consumer health data laws (such as Washington's My Health My Data Act, Nevada SB 370 and Connecticut's law) and our Privacy Policy protect it instead. Nothing on Advicey is medical advice. If you are having a medical emergency, call 911.

3. Two separate consents

  • Consent to collect: lets us store the injury details you type and show a short, redacted label (for example "broken bones") to licensed lawyers in your state.
  • Consent to share: lets us give your full injury details to the one firm you pick.
  • Both are off by default. You can post without either. We never make a bounty, a Pool, or any feature depend on giving health consent.
  • You can withdraw either consent at any time from your case page or your profile. We stop using the details at once and delete them within 30 days, except a copy the firm you picked already received (that firm becomes responsible for it).

4. What we do with it

Only to show the redacted label, to give the details to the firm you pick (with consent), to keep records the law requires, and to protect against fraud. Never for advertising, never for profiling, never to set prices, and never sold. We do not use geofencing around health care facilities.

5. Who receives it

The firm you pick (only with your consent to share), and our service providers Cloudflare (storage and hosting) and Stripe (only if you include health details in a payment-related message, which you should not). They process it only for us under written contracts.

6. Your rights

Confirm whether we hold your health data, get a copy, delete it, withdraw consent, and get the list of every third party and affiliate it was shared with and how to contact them. Use your profile page or email privacy@advicey.com. We answer within 45 days. You may appeal a denial as described in the Privacy Policy.

7. Security and access

Health details are encrypted separately, are visible only to staff whose job requires it, and every view is logged. We keep them no longer than needed (see the Privacy Policy) and delete them at case close plus 90 days.

8. Your choices before you share

Share only what helps a lawyer understand your matter. You do not need to list diagnoses or medications to get bids. Do not upload medical records; if you hire a lawyer, they will request records directly with your authorization.