Google Health puts you in control of your health records

We believe that your health information belongs to you, so we put you in control. Want to store your health records online? Here's how we keep your data safe and private.

• We will never sell your data.
• Your health information is stored in your secure account and cannot be accessed by others through a search on Google.com.
• You choose who to share your information with.
• If you give someone access to your account, you can revoke that access at any time.
• We have state-of-the-art technology and some of the best information security experts in the world making sure your data is safe in Google Health.

Privacy Policies

All of Google's products and services, including Google Health, are governed by our main privacy policy, which explains how we treat personal information. In addition, we've created a policy that describes privacy practices specific to Google Health. Check out the Google Health privacy policy.

Online health services that are integrated with Google Health must comply with our Google Health Developer Policies, which establish strict privacy standards for how they collect, use, and share your information. It's up to you if you want to share your health information with any of these services.

Google Health Privacy FAQ

How does Google Health protect my privacy?

We'll never sell your health information or make it publicly accessible through searches on Google.com. We also won't share it with others unless you explicitly authorize us to do so, or in the limited circumstances described in the Google privacy policy (such as when we're required to do so by law). When you first create and save personal health information, you're the only one who can view and edit it. These are some of the things you can do at any time:

• Delete your data.
• Share your health information with others you choose.
• View who can access your account and what edits have been made to your information.
• Revoke access privileges.

Will others -- like my employer or my insurance company -- be able to access the information I store in Google Health?

You, and only you, control access to your health information when you use Google Health. It's really up to you to choose who views or adds information to your Google Heath profile, and you can revoke access at any time. We let you view all of the activity on your account, so you can ensure that only the people and services you've granted access can view your profile or add information to it.

If you choose to sync your Google Health account with your health care provider, pharmacy, or any other online health service, we'll tell you what kind of access the service will have to your account before you authorize it:

• Write-only access: The service can add information to your profile but not view anything you've stored in it.
• Read/write access: The service can view your profile and add information to it.

How does Google Health keep my health information secure?

We use software, hardware, and strict policies to keep your health information safe and private.

The health information users store with us is protected by state-of-the-art technologies, including Secure Socket Layer (SSL) encryption, firewalls, alarms, and other technology we build ourselves or buy from other experts in the security industry. We have extensive backup systems in place to protect the integrity of this information. Google's servers are protected by strong physical security at our facilities, including pass codes, locks, and security personnel.

Procedural safeguards are also in place to secure the health information users store with us. Within Google, only the people who are operating and improving Google Health have access to user information, and they are bound by strict policies to not disclose this information to others, either within Google or to the outside world.

Is Google Health covered by HIPAA?

Unlike a doctor or health plan, Google Health is not regulated by the Health Insurance Portability and Accountability Act (HIPAA), a federal law that establishes data confidentiality standards for patient health information. This is because Google does not store data on behalf of health care providers. Instead, our primary relationship is with you, the user. Under HIPAA, you have a right to obtain a copy of your medical records. If you choose to use Google Health, we'll help you store and manage your medical records online.

Although Google Health is not covered by HIPAA, we are committed to protecting your privacy. Our Google Health privacy policy governs what information Google Health collects and how we use it, and any violation of that policy can be enforced by the Federal Trade Commission, which takes action against companies that engage in unfair and deceptive trade practices -- including violations of their privacy policies.

Check out more information on Google Health and HIPAA.