Pymander is a medical AI system, not a licensed healthcare provider, and it protects your messages with HIPAA-aligned safeguards: encrypted in transit and at rest, never sold, never used for advertising, and never used to train generalized AI models.
The plain-language version of what that means for your data: the privacy policy and the safety page are the source of truth, and both are written to be read, not skimmed past. You can access, export, or delete your data, and no advertiser, insurer, or employer ever sees your messages. Details and sources below.
What to do
Common questions
Is Pymander HIPAA compliant?
Pymander is a medical AI system, not a licensed healthcare provider, and it protects your data with HIPAA-aligned safeguards: practices designed to align with HIPAA requirements. In practice, that alignment is a set of concrete commitments rather than a label: your messages are encrypted in transit and at rest; they are never sold and never used for advertising; they are not used to train generalized AI models; and they are shared only with the people and partners needed to deliver your care. You stay in control of your data: you can access it, export it, or delete it. Two honest notes. First, "HIPAA compliant" is a claim about a legal regime that applies to specific kinds of organizations, and the meaningful question for any health tool is what it actually does with your data - which is why this page lists practices rather than stopping at a yes or no. Second, the source of truth is the privacy policy and the safety page, both public, both plain-language, both linked below. If you want the formal wording, read those; they say exactly what is collected, how it is protected, and what you can do with it.