Archive: Google Health Privacy Policy

View current privacy policies | Version 5/19/2008

The Google Privacy Policy describes how Google treats personal information when you use Google's products, including information provided when you use Google Health. In addition, the following describes our privacy practices that are specific to Google Health, a service that helps you store and organize your personal health information.

You are in control of your information

1. You control who can access your personal health information. By default, you are the only user who can view and edit your information. If you choose to, you can share your information with others.
2. Google will not sell, rent, or share your information (identified or de-identified) without your explicit consent, except in the limited situations described in the Google Privacy Policy, such as when Google believes it is required to do so by law.
3. You can completely delete your information at any time. Such deletions will take immediate effect in your account, and backup copies of deleted information may persist for a short time. Since deleted data will not be restored, you may want to print information before deleting it.

How Google uses your information

1. To store your information in Google Health, you will need a Google Account. When you create a Google Account, Google asks for your email address and a password, which is used to protect your account from unauthorized access. You can use an existing Google Account or create a new Google Account specifically for this purpose.
2. Google's servers automatically record log information about your use of Google Health (such as number of sign-ins and number of times a link was clicked). This information is temporarily stored in association with your Google Account for two weeks, at which point it is aggregated with other data and is no longer associated with your account. The log information will be used to operate and improve the service and will not be correlated with your use of other Google services.
3. Google will use aggregate data to publish trend statistics and associations. For example, Google might publish trend data similar to what is published in Google Trends. None of this data can be used to personally identify an individual.
4. Certain features of Google Health can be used in conjunction with other Google products, and those features may share information to provide a better user experience and to improve the quality of our services. For example, Google Health can help you save your doctors' contact information into your Google Contact List.

Sharing your information with people and services you trust

1. If you share your information with others, you can view a list of who has access to your information and you can revoke sharing privileges at any time. When you revoke someone's ability to read your health information, that party will no longer be able to read your information, but may have already seen or may retain a copy of the information.
2. Google Health contains a directory of third-party websites that are capable of securely sending information to Google Health. These websites (which may include your medical provider) may give more information about certain conditions or extend the functionality of Google Health in other ways. By creating a link to these websites, you give them permission to send you information such as medical records, prescription histories, or test reports.
3. You can approve access for some of these websites to view your health information. If a website accesses your health information and stores a copy of your information, that copy will be governed by that website's privacy policy. Others at that facility - like an on-call doctor - may be able to view your information. Google is not responsible for the content, performance, or privacy policies of third-party websites.
4. Some of these third-party websites will be covered by federal and state health privacy laws (such as the Health Insurance Portability and Accountability Act, or "HIPAA"), and those laws will govern how they may use and share your information. As a result, you must authorize these providers to send information to your Google Health account. With that authorization, you also give them permission to send certain types of health information (such as mental health records) that are protected by federal and state laws and require special authorization. When you ask Google to send your health information to others, you will also be giving Google permission to send those certain types of health information.
5. All third-party websites listed in the directory are contractually required to abide by the Google Health Developer Policies, which establish strict privacy standards for how they collect, use, or share your information.

More information

Google adheres to the US Safe Harbor privacy principles. For more information about the Safe Harbor framework or our registration, see the Department of Commerce's web site.

For more information about our privacy practices, go to the full privacy policy. If you have additional questions, please contact us any time. Or write to us at:

Privacy Matters
c/o Google Inc.
1600 Amphitheatre Parkway
Mountain View CA 94043 (USA)