Patient Privacy Policy

Phreesia is a company built on your trust

Phreesia is a company built on your trust. We take security very seriously and have built our systems to meet and exceed the strict security requirements of the Healthcare and Financial Services industries to ensure our users are protected. A combination of Federal guidelines and corporate policies ensures that all patient-related health and financial information is protected by the most stringent administrative, technical and physical safeguards.

Data collection is done strictly to support our customers' workflow and clinical needs. Phreesia's data-use policy is in strict accordance with Federal Laws and HIPAA Regulations. Under HIPAA, Phreesia is classified as a business associate, which is defined as an individual or corporate "person" that is not a member of the covered entity's workforce and performs (on behalf of the covered entity, i.e. the practice) any function or activity involving the use or disclosure of protected health information (PHI). Phreesia complies with all HIPAA standards under the federal Privacy and Security Rules.

Phreesia's Privacy Procedures:

Phreesia is committed to maintaining and securing all protected health information as comprehensively as possible. We take this responsibility seriously and work to continuously protect patients' rights and security. This means:


Phreesia does NOT sell, rent or disclose protected patient health information to anyone or use it without patient authorization or as governed, permitted or required by law.


Phreesia's technology was designed to safeguard protected health information and conforms to HIPAA guidelines.


Patient information is secured through password protection and is accessible within a practice only by doctors and authorized staff.


Phreesia employs leading physical and technical security measures to store and protect all health-related data. Patient information is firewall-protected and is under electronic surveillance 24 hours per day, 7 days per week.


All patient information is transmitted through encrypted connections to its designated data centers. No patient information is stored on the PhreesiaPad.




Policy Updates:


If you have questions, comments or would like to better understand the privacy policy, you can reach us at 1-888-654-7473 or at

Last Updated: February, 2011