Consumer Health Data Privacy Policy
What health information Verd collects, why, who sees it, and how to withdraw consent or delete it.
This policy supplements our Privacy Policy and applies to "consumer health data" as defined by Washington's My Health My Data Act, Nevada's consumer health data law, Connecticut's privacy law, and similar laws. Where this policy and the Privacy Policy differ, this one controls for health data.
1. The health data we collect
- Health conditions you select or type, including allergies.
- Medications you list, what you pay for them, and their formulary tier.
- Planned procedures and how often you see doctors, specialists, urgent care, or the emergency room.
- Height, weight, and tobacco use.
- Whether you are planning a pregnancy, if you tell us.
- Information in documents you upload for analysis (medical bills, Explanations of Benefits, plan documents) and the findings extracted from them, such as procedures, provider names, and amounts.
- Questions you ask the Verd Assistant, which may include health information you choose to share.
- Preventive services you mark as used, and appointments and life events you track.
We infer nothing about your health beyond what you tell us. We do not collect precise geolocation, and we do not use geofencing.
2. Why we collect it
Only to provide what you asked for: estimating your year of healthcare costs so each plan can be priced against it, running the dashboard tools you use, and answering your questions. We do not use health data for advertising, and we do not sell or rent it to anyone.
3. Who it is shared with
Health data is stored with Supabase (our database provider). Chat messages and uploaded documents, together with your plan figures and a pseudonymous account ID, go to Render (which hosts our analysis service) and to Anthropic (the AI model provider) to generate a response; Anthropic does not train its models on this data. No other company receives your health data. Each of these providers is bound by contract to use the data only to provide its service to us. We do not share health data with insurers, brokers, employers, advertisers, or data brokers.
4. Your consent, and how to withdraw it
We ask for your consent to collect health data at the start of the questionnaire, and you can answer as few of the health questions as you like — age and income are the only required fields. You can withdraw consent at any time by deleting your account (the Delete my account button on the dashboard removes every item listed above) or by editing your answers from "My answers" to remove health information. If you withdraw consent, the cost estimates become less specific to you; the rest of Verd keeps working.
5. Your rights
- To confirm whether we collect, share, or sell your health data (we never sell it) and to see it — almost all of it is visible on your dashboard and under "My answers."
- To receive a list of the third parties it has been shared with (section 3 is that list).
- To withdraw consent (section 4).
- To have it deleted, including from our backups within 30 days and from the providers in section 3, which we will instruct to delete it.
- To appeal a decision we make about a request, by replying to our response; we will answer the appeal in writing within 45 days and tell you how to contact your state attorney general if you disagree.
To make a request that the dashboard does not already handle, use the contact form and choose "Privacy & Data Request." We respond within 45 days, free of charge, and we will not treat you differently for asking. We may ask you to confirm the request from the email address on your account.
6. Contact
Verd Health LLC, a Nevada limited liability company
801 Pennsylvania Avenue NW, Washington, DC 20004
verdhealth.com/contact