Patient chat that respects privacy
Healthcare chat carries a higher bar than most. Protected health information has to be handled with care, and a bot that mishandles it creates real risk. We build patient-facing chat with privacy safeguards designed in from the start: data minimization, access controls, and a signed Business Associate Agreement where a vendor handles PHI.
The goal is to help patients with routine tasks without turning the chat into an unguarded record of their health details.
- Design around data minimization — collect only what's needed
- Support for a Business Associate Agreement (BAA) with infrastructure vendors
- Encryption and access controls for data in transit and at rest
- Clear scope: routine help, not diagnosis or medical advice
- Human handoff for clinical questions and anything urgent
- Audit-friendly logging of decisions rather than raw sensitive content
What it can help with
A healthcare chatbot is best at front-desk work: scheduling requests, pre-visit intake, insurance and hours questions, and pointing patients to the right resource. It reduces phone volume and after-hours friction.
It should never be positioned as a substitute for a clinician. We build in explicit boundaries and urgent-symptom escalation language so it stays in its lane.
- Appointment requests and scheduling support
- Pre-visit intake and form completion
- Answers to hours, location, insurance, and policy questions
- Prescription-refill and records-request routing to the right team
- Urgent-symptom messaging that directs patients to real care
- No diagnosis, no treatment advice — clear escalation instead
More on ai chatbots & assistants
Frequently asked questions
Can you guarantee the chatbot is "HIPAA compliant"?
Compliance is a property of your whole operation — policies, staff, infrastructure, and vendors — not a checkbox on a chatbot. We build with HIPAA safeguards in mind and use infrastructure that supports a BAA, but final compliance depends on your environment and your own review with counsel or a compliance officer.
Is this a medical device or does it give medical advice?
No. It handles administrative and informational tasks and is explicitly scoped away from diagnosis or treatment advice. Clinical questions are routed to your staff.
Where is patient data stored and who can see it?
We design for data minimization and appropriate access controls, using infrastructure that can be covered by a BAA. The specifics depend on your systems, which we'd map out together before building.