FLIP Care Companion is a direct-to-consumer platform. We are not a HIPAA Covered Entity and we are not acting as a Business Associate, unless a Business Associate Agreement (BAA) has been formally executed with your organization.
What that means
- HIPAA regulates health plans, healthcare clearinghouses, most healthcare providers, and their business associates. FLIP is none of those, it is a consumer caregiving tool you choose to use.
- Health-related details you enter (conditions, medications, vitals, insurance cards, notes) are generally not Protected Health Information (PHI) under HIPAA when held by us.
- You store this information at your own discretion. Only enter what you need to coordinate care.
We still protect it seriously
Not being HIPAA-regulated does not mean we treat health data casually. We apply encryption in transit and at rest, per-account row-level access rules, role-restricted admin access, breach notification consistent with applicable state and federal consumer laws (including the FTC Health Breach Notification Rule where it applies), and vendor agreements with our infrastructure and AI providers.
Sharing inside your care circle
When you invite a family member or helper, you are choosing to disclose health details to them. We cannot control what they do with what they see. Review your circle regularly and remove access that is no longer needed.
If you are a provider, agency, or employer
If your organization is a Covered Entity and wants to use FLIP on behalf of patients or clients, do not upload PHI until a BAA is signed. Contact legal@flipcareapp.com to request one. Without an executed BAA, any information your staff enters is treated as consumer data under this notice.
Records from your provider
Documents or summaries you personally obtain from a provider and upload here leave HIPAA’s protection once they are in your own consumer account, the provider’s obligations do not transfer to us.
Related policies
See the Privacy Policy for collection, retention, and deletion details, and the Medical Disclaimer for the limits of the service.