Legal
How we handle information on ensure.health and in the WellBee app.
Ensure Health, Inc. (“Ensure Health,” “we,” “us”) operates ensure.health and the WellBee mobile application (getwellbee.com), plus related employer and partner services. This Policy describes what information we collect, how we use and share it, and your choices. It is intended to support applicable privacy laws and App Store privacy disclosures. By using our services, you agree to this Privacy Policy.
This Policy covers our marketing websites, WellBee, employer portals (when available), and partner integrations (when available under separate agreements). Written BAAs, order forms, or partner agreements control if they conflict with this Policy. Do not submit PHI through public demo or draft pages unless we designate a secured channel.
We collect information when it is transmitted off the device and retained longer than needed to service a request in real time. On-device-only processing is not “collected.”
We use information to operate and secure the services (authenticate users, determine eligibility, provide navigation and affordability support, support customers); personalize pathways where appropriate; analyze product performance in aggregate; contact organizational leads who request demos; and comply with law. We do not use member health data for third-party advertising in WellBee.
We may share information with service providers under contract (and BAAs when they touch PHI); employers or plan sponsors as permitted by law and program design (often aggregate reporting); integration partners as needed to deliver enabled features; and advisors or authorities when required by law or to protect rights and safety. We do not sell PHI or share member data with data brokers for advertising.
WellBee is not designed to track users for third-party advertising. We do not use advertising SDKs that combine WellBee data with other apps for ad targeting. For App Store Connect, data used to run the app (such as contact info, health, identifiers, usage, and diagnostics) is typically linked to the user and used for app functionality — not for tracking. We will update this Policy and our App Store answers if practices change.
When we create, receive, maintain, or transmit PHI on behalf of a covered entity or business associate, we act as a business associate under HIPAA and enter into BAAs as required. Public marketing forms are not channels for PHI. See also Security & Compliance.
We use administrative, technical, and physical safeguards appropriate to the data we handle, including encryption and access controls. We retain information as needed to provide the services, meet legal and contractual obligations, and then delete or de-identify it according to our policies.
You may update certain account information in-product when available, manage device permissions in your settings, and opt out of non-transactional marketing emails. Where we hold PHI as a business associate, individual rights requests are often handled through the covered entity under the BAA. Residents of states with consumer privacy laws may have additional rights (subject to exceptions, including for HIPAA-covered data). Contact us to exercise available rights.
Our services are not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe we have done so.
Our websites may use cookies or similar technologies needed to operate the site and may load content from third-party CDNs. We do not currently run third-party advertising pixels on the marketing site. We will update this section if we add analytics or optional cookies.
We may update this Policy by posting a revised version on this page. Continued use after changes constitutes acceptance except where additional consent is required.
Privacy questions: partnerships@ensure.health · Ensure Health, Inc. · ensure.health · Members: getwellbee.com
Related: Security & Compliance