HIPAA Compliance & Privacy Practices
Last Updated: January 29, 2026
At CureRadar LLC ("we," "us," or "our"), we take the privacy and security of your health-related information very seriously. This page explains our status under HIPAA (the Health Insurance Portability and Accountability Act of 1996) and the strong privacy and security measures we apply to protect the sensitive information you submit.
Our HIPAA Status
CureRadar is NOT a HIPAA-covered entity.
HIPAA applies to "covered entities" (such as healthcare providers who transmit health information for treatment, payment, or healthcare operations) and their "business associates." CureRadar operates as an informational platform where users voluntarily submit medical case details for review and educational insights from independent, verified healthcare professionals. We do not:
- Provide medical treatment, diagnosis, or a doctor-patient relationship
- Bill health insurers or process healthcare payments
- Act as a healthcare clearinghouse
- Perform functions on behalf of covered entities under a Business Associate Agreement (BAA)
As such, we are not required to comply with HIPAA's Privacy, Security, or Breach Notification Rules. However, because users entrust us with sensitive health information, we voluntarily adopt many HIPAA-aligned practices to protect your data and build trust.
Our Privacy & Security Commitments
Even though we are not a HIPAA-covered entity, we implement robust safeguards consistent with industry best practices for handling sensitive health data:
- Data Encryption: Information is encrypted in transit (TLS 1.3+) and at rest where technically feasible.
- Access Controls: Strict role-based access; only authorized personnel (and reviewing Specialists under confidentiality agreements) can access case data.
- Minimum Necessary: We collect and use only the information needed to provide the Service.
- Confidentiality Agreements: All Specialists and team members with access sign strict confidentiality obligations.
- Security Practices: Regular vulnerability scanning, secure hosting, logging/monitoring, and incident response procedures.
- Data Retention & Deletion: We retain data only as long as necessary and support user deletion requests (subject to legal exceptions).
For full details on how we collect, use, share, and protect your information, please review our Privacy Policy.
Important Disclaimers
The Service is for informational and educational purposes only — not medical advice, diagnosis, or treatment.
No method of electronic transmission or storage is 100% secure. While we use industry-standard protections, we cannot guarantee absolute security. You submit information voluntarily and at your own risk.
If you are a healthcare provider or covered entity using CureRadar in a professional capacity, note that we do not offer Business Associate Agreements (BAAs) at this time, as we do not act as a business associate.
Contact Us
Questions about our privacy practices, data security, or HIPAA-related topics? Reach out to:
email: cureradar@gmail.com
CureRadar
© 2026 CureRadar. All rights reserved.