Security & trust
Your family's health information is sensitive. Here's exactly how we protect it — in plain language, no jargon.
HealthBase is a personal organization tool, not a covered entity. We are not a HIPAA-covered service and don't make HIPAA claims — instead we hold ourselves to the security practices below.
Encrypted end to end
Documents are encrypted in transit (TLS 1.3) and at rest (AES-256). Only you and the people you invite can open them.
Multi-factor authentication
Protect your account with an authenticator app or SMS code. Required for owners on new devices.
Role-based access
Owner, Editor and Viewer roles control exactly who can see and change each person's records. Revoke anytime.
Full audit log
Every login and document access is recorded, so you always know who viewed what and when.
Your data, your export
Download an organized export and schedule deletion of a care recipient, documents, or a family workspace. Active records are removed after the grace period; backups age out under provider retention policies, and downstream-provider deletion may require manual confirmation.