Is BioTrace HIPAA Compliant?

Short answer: HIPAA doesn't actually apply to BioTrace — and that's true of nearly every consumer health app you use, not a red flag specific to us. Here's what HIPAA covers, why it doesn't reach direct-to-consumer apps, and what protections do apply instead.

What HIPAA actually covers

HIPAA regulates "covered entities" — healthcare providers, health insurers, and healthcare clearinghouses — along with their contracted "business associates" (vendors who process data on a covered entity's behalf). It was written for the provider-insurer side of healthcare, not for apps a person chooses to install and use on their own.

Why that means BioTrace isn't a "HIPAA compliant" app

BioTrace is a direct-to-consumer app. You install it, you choose what data to add (lab photos, wearable signals), and you're not a "patient" of BioTrace the way you're a patient of a doctor's office. That structurally places BioTrace outside HIPAA's covered-entity and business-associate definitions — the same is true of most consumer health-tracking apps, wearables, and fitness platforms. A company claiming to be "HIPAA compliant" as a consumer app is often using the term loosely, since HIPAA compliance isn't really the applicable standard to claim in the first place.

What actually does apply

The FTC's Health Breach Notification Rule covers apps that maintain personal health records outside traditional HIPAA-covered entities — it requires notification in the event of a breach of identifiable health information. Depending on where you live, state-level health privacy laws may add further protections on top of that.

Does BioTrace sell my health data?

No. Per BioTrace's privacy policy: health-related information, including Apple Health data, is used only to provide the educational insights and functionality you've requested — not for advertising, marketing profiling, or data broker activity, and it is not sold.

Can I export everything and delete my account?

Yes to both. BioTrace supports full PDF/CSV export of your reports and data, and account deletion is available directly in the app — you're not locked into keeping data here to keep using it elsewhere, and you're not locked into keeping an account you no longer want.

BioTrace is educational and self-tracking software. It does not diagnose or treat any condition and is not a substitute for professional medical advice. This article explains general regulatory categories and is not legal advice.