What happens to the bill details you give us
Effective September 30, 2026
FairBillCheck compares the charges on a medical bill with Medicare's published payment amounts, at fairbillcheck.com. The details you enter describe your health care, so we collect as little as the report needs and use it for nothing else.
What we collect
- What you type into the form: the provider's ZIP code, the type of bill, the month of care, each line's code, units, charge and optional note, your name, the provider's name and account number, your answers about insurance and a Good Faith Estimate, and the bill date. We use these only to build your report and letter.
- Your email address, to deliver the report and your receipt.
- Payment details are handled by Stripe. We never see or store your card number, security code or expiry date. We receive a confirmation that the payment succeeded and a limited record for refunds and accounting.
We do not ask for your date of birth, Social Security number, insurance member ID or diagnosis, and you do not need to enter them.
Health information and HIPAA
HIPAA applies to health plans, providers and their business associates. FairBillCheck is none of these: you enter your own information and we return a report to you. We still treat what you enter as sensitive health information. If it were ever exposed in a security breach, we would notify you as the Federal Trade Commission's Health Breach Notification Rule requires.
Analytics without cookies
We count visits with Fathom Analytics, which sets no cookies, collects no personal data and does no cross-site tracking, so no cookie banner is needed. Fathom never receives anything you type into the form.
We do not sell or share your information
We do not sell your personal information and do not share it for cross-context behavioral advertising, as the California Consumer Privacy Act (as amended by the CPRA) defines those terms. We honor the Global Privacy Control signal as an opt-out, although there is nothing to opt out of.
Who processes it for us
- Stripe, for payment.
- Our email delivery provider, to send the report to you.
- Our hosting providers, which store the order and the PDF so you can download it again.
None of them may use your information for their own purposes. We never send your details to the provider on your bill; the letter goes only to you, and you decide whether to send it.
How long we keep it
We keep your order (the inputs, your email and the PDF) so you can download the report again and so we can answer support questions, and we keep the payment record for as long as tax and accounting law requires. Email [email protected] to have your inputs and PDF deleted sooner; we will keep only the payment record the law requires.
Your rights
Depending on where you live, you may have the right to see, correct, delete or take a copy of your personal information. Email [email protected] and we will respond within the time the law allows. We will not treat you differently for asking.
Children
The service is for adults. If a child has sent us information, email [email protected] and we will delete it.
Security
Everything travels over encrypted HTTPS connections, and card data is handled only by Stripe. No system is perfectly secure, which is why we collect so little.
Changes
If this policy changes, we will update the effective date above and describe material changes on this page.
Contact
Privacy questions: [email protected] ([email protected] also reaches us).