Health Data & HIPAA: What Applies to Us and What Doesn't

Last Updated: July 20, 2026

1. You Probably Think HIPAA Covers This. It Doesn't.

Most people believe that anything involving health information is automatically "HIPAA protected." That is one of the most common misunderstandings in American healthcare.

HIPAA does not apply to The Implant Experience. Rather than let people assume otherwise, we want to explain exactly why—and what protects your information instead.

2. What HIPAA Actually Is

HIPAA is a federal law enacted in 1996. It regulates certain organizations rather than all health information.

HIPAA applies to:

• Health plans (insurance companies)
• Health care clearinghouses
• Health care providers that electronically transmit health information for billing purposes
• Business associates handling information on behalf of those organizations

If an organization does not fall into one of these categories, HIPAA generally does not apply regardless of how sensitive the information may be.

3. Why HIPAA Doesn't Apply to Us

The Implant Experience is not:

• An insurance company
• A health care clearinghouse
• Your doctor or hospital
• A business associate acting on behalf of your provider

You voluntarily provide information directly to us so we can deliver services you've requested. That relationship falls outside HIPAA's legal scope.

HIPAA is not something a company can simply "opt into." It depends entirely on the type of organization involved. We believe it's more honest to explain this than to suggest protections that legally do not exist.

4. What This Means in Practice

The information you provide—such as your implant model, serial number, and implant date—is absolutely health information.

However, because of who holds that information, it is not considered "Protected Health Information (PHI)" under HIPAA.

That means the specific legal rights HIPAA gives you against your hospital or physician do not automatically apply to The Implant Experience.

That gap is real, and we believe you deserve to know about it.

5. What Actually Protects You

Your information is protected through several legal and contractual commitments.

• Federal Trade Commission (FTC)
  Everything we promise in our Privacy Policy and Terms of Service is legally enforceable under federal consumer protection law.
• FTC Health Breach Notification Rule
  If your health information is ever compromised, we are legally required to notify both you and the FTC.
• State Health Privacy Laws
  Several states have enacted stronger protections for consumer health data. We apply the strictest standards to all members regardless of where they live.

6. Our Commitments

Although HIPAA does not require these protections, we voluntarily commit to them:

• We will never sell your health data.
• We will never use your information for advertising.
• We do not allow advertising trackers on our website.
• We follow security practices modeled after the HIPAA Security Rule.
• We collect only the minimum information necessary.
• You can delete your information at any time.
• If a breach occurs, we will notify you.
• If our privacy commitments ever change, we will notify you and seek consent where required.

7. When HIPAA Does Apply

If we ever need medical records directly from your surgeon or hospital—for example, to identify a specific implant—HIPAA applies to your healthcare provider.

Your provider cannot release those records without your written authorization.

If we ever request that authorization, we will clearly explain what it covers.

Once records leave your provider and are shared directly with us, HIPAA no longer governs those records. Our Privacy Policy, Terms of Service, and applicable consumer protection laws then apply.

Currently, we do not collect medical records directly from healthcare providers. Instead, members enter their own implant information from implant cards or surgical records.

8. Why We Wrote This

Many people assume HIPAA protects every company that handles health information.

It doesn't.

We believe trust begins with honesty. If we're asking you to trust us with information about your implant, we think you deserve a clear explanation of exactly what legal protections apply—and which ones do not.

Questions?

Email us anytime at support@theimplantexperience.com .