Security & privacy
Americano Health is built on encrypted, healthcare-aware infrastructure. This page summarizes how we secure your data, how we treat PHI, and how you control your information. Full details are in our Privacy Policy and Terms of Use.
Data security
We implement industry-standard technical and organizational measures to protect your data:
- Encryption in transit and at rest: TLS for data in transit; AES-256 for data at rest.
- Scoped access: Access is controlled per profile and account. Only you and people you authorize (e.g., caretakers) can see the health data you share.
- HIPAA-aware infrastructure: Hosted on AWS with healthcare workflows and FHIR-based integrations in mind.
- Ongoing security: Regular security assessments and monitoring to detect and address issues.
No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we strive to protect your information and respond quickly to threats.
We don't sell your data
We do not sell, rent, or trade your personal or health information. We share data only with your consent (e.g., caregiver access), with trusted service providers who help us operate the Service under confidentiality obligations, or when required by law. See Section 4 of our Privacy Policy for full details.
Data retention & your control
We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or anonymize your personal data within 30 days, except where we must retain it by law or for legitimate business purposes (e.g., resolving disputes).
You can access the information we hold about you, correct it, export your health data in a portable format, and delete your account and associated data at any time. To exercise these rights, use your account settings or contact us at privacy@americanohealth.com.
Your responsibility
You are responsible for keeping your account credentials confidential and for all activity under your account. If you invite caretakers, you control their access and can revoke it at any time. Do not share your login details with others. If you suspect unauthorized use, notify us promptly. See our Terms of Use for acceptable use and account obligations.