Get startedTalk to us

Who we serve

Families and individualsHealth plansTPAs and administratorsEmployersProvider groups and ACOsPartners and consumer brands

What Atticus does

How it worksProgramsBlood pressure and heartNutritionMovementSleepMindBenefits and fulfillment

Atticus

TrustResourcesAboutTalk to us

Trust & security

Privacy policy

What we collect, how we use it, and the choices you have — in plain English.

Last updated: September 24, 2026

Who we are

Atticus Health, Inc. ("Atticus", "we", "us") is a care-management company. We furnish care coordination and care management directly to the people enrolled in our programs, which makes Atticus a HIPAA covered health care provider. The full legal notice of how we use and disclose health information, and your rights over it, is our Notice of Privacy Practices.

This policy covers two things: this website (atticushealth.com) and the Atticus app that members use. If you use the app, the in-app terms and consents you accept there also apply.

Atticus Health, Inc. provides its own care under National Provider Identifier (NPI) 1932042181. Atticus also acts as a Business Associate when providing delegated care-management services for covered-entity customers.

Information we collect

On this website

  • Contact information you choose to send us — for example, your name, email, and organization when you email us or request a demo.
  • Basic analytics — anonymous, aggregate information about how the site is used, so we can make it better. We do not build advertising profiles.

In the Atticus app (members)

  • Health information — your records, medications, lab results, hospital events, and the care activity we manage for you. This is protected as PHI under HIPAA and used as described in our Notice of Privacy Practices.
  • Account information — your phone number and the profile details you add, used to sign you in and keep your account yours.

Apple Health and connected devices

Connecting Apple Health is optional. You choose which supported health and fitness information Atticus can read in Apple's permission sheet. This can include past readings and information that compatible apps and devices write to Apple Health.

Atticus saves the information you share, including available source and time details, in your Atticus health record. Your authorized care team uses it for care coordination, monitoring, and health insights. This information does not stay only on your iPhone.

You can change access in Apple Health at any time. Turning off access stops future access to those data types. It does not automatically delete information already included in your care record; the retention rules below still apply. Atticus does not use Apple Health information for advertising, marketing, or advertising profiles.

Gmail and Google Calendar

Connecting Google is optional. If you connect it, Atticus asks Google for three things: to read your email, to send email you approve, and to see and change your calendar events.

  • Email you receive. Atticus looks at the sender and subject of new email. It reads the full message only when it looks like an appointment, a schedule, a deadline, a form or a bill, and adds the dates it finds to your agenda. The email itself is not stored.
  • Searching your email. When you ask Atticus about your email, it searches your Gmail and uses up to five messages to answer you. They are not kept after that answer.
  • Email you send. Atticus sends an email from your Gmail only after you approve its exact words.
  • Your calendar. Atticus shows your Google Calendar events on your agenda, and adds, moves or removes the events you create in Atticus.

Atticus's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google data for advertising, do not sell it, and do not use it to train general AI models. People at Atticus do not read it unless you ask us to, it is needed for security, or the law requires it. Google data is processed by our service providers, including our AI provider, only to give you these features. You can disconnect Google in the app's Settings at any time, which stops all access, or remove access at myaccount.google.com/permissions.

AI features and your choices

Atticus uses Amazon Web Services, including Amazon Bedrock, for AI processing. This includes messages (including transcribed watch voice requests) and attached photos or de-identified document text, journal entries and reflections, meal descriptions and food preferences, food or pantry photos you choose to analyze, video captions you choose to translate, de-identified visit transcript text you ask Atticus to summarize, and de-identified care summaries. Atticus uses this information to explain records, respond to requests, check journal text for safety concerns, translate captions, summarize visits, and personalize meals and routine care tasks. Enrollment explains this processing before you agree. Returning members and caregivers can review and approve this disclosure before using app AI features. Declining this permission does not block record browsing or enroll you in clinical care.

Optional live voice uses OpenAI to process your audio, your chosen given name, and relevant de-identified care context. The app asks for permission before voice starts. Companion voice is not recorded by Atticus. AI telephone calls use Telnyx for calling and OpenAI for voice processing. A separate permission explains this processing and call recording. Optional avatar illustration asks separately before sending your cropped photo to OpenAI.

Permission for one optional AI feature does not grant permission for the others. You can decline these optional features and continue using the app. Service providers may use the information only to provide the authorized service under our applicable agreements.

How we use it

We use your information for one purpose: to provide care management — spotting things that need attention, coordinating your care, and keeping you and your care team informed.

We never sell your information. We never use it for advertising. Not yours, not anyone's, not in aggregate, not "anonymized." It isn't our business model and it never will be.

PHI & HIPAA

Atticus is a HIPAA covered health care provider. Your HIPAA rights — to see your records, get copies, request corrections, and ask who has accessed them — are exercised directly with us. See our Notice of Privacy Practices for the full description of your rights and how to use them.

Not sure how to make a request? Email hello@atticushealth.com and we'll walk you through it.

Sharing

We share health information only in these cases:

  • Your care team — the clinicians and care managers involved in your care, so they can act on what we find.
  • Your family circle — only the people you invite, and only what you choose to share with each of them. You control this in the app and can change it at any time.
  • A doctor or office you choose — after you review the whole record and explicitly share it. The app shows the recipient, delivery status, and link expiration. Stopping a link prevents future access through that link. It cannot recall copies already received or saved.
  • Subprocessors — a small number of service providers (like our cloud host) that help us run the service. Every one that touches PHI operates under a BAA and the same safeguards we hold ourselves to.
  • When the law requires it — and only to the extent it requires.

We never sell your information, and we never share it for anyone's marketing. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with third parties for their own marketing. Service providers process phone numbers and messaging permissions only as needed to host the service, protect accounts, and deliver authorized communications. They may not use this information for their own advertising.

Text messages

If you turn on Atticus by Text, we use your mobile number to send and receive text messages with you, and we keep the conversation as part of your health record so your care team can see it.

Turning it on is a separate, explicit choice you make inside the app — it is never on by default and is never bundled into signing up. Allowing health details in a text is a second, separate choice, also off by default, because a text can be read by anyone holding your phone.

You can turn it off at any time by replying STOP to any message, or in the app under Settings. Reply HELP for help. Message and data rates may apply, and message frequency varies with your care.

Retention & deletion

We keep health information for as long as healthcare law requires and as needed to provide your care. If your enrollment with Atticus ends, you may request a complete export of your records; audit records are retained as long as healthcare law requires.

You can request account deletion in the app under You > Privacy and data. The confirmation explains what is deleted and which medical and audit records must be retained. You can also contact us for help with access, corrections, or deletion requests.

Security

Atticus encrypts stored health information and protects it in transit. Authorized access to clinical records is audited. The full picture is on our security page.

Children

This website is not directed at children, and we do not knowingly collect information from children through it. Where a health plan enrolls a minor in care management, that happens under the plan's authorization and a parent or guardian's consent, not through this site.

Changes

If we change this policy, we'll update this page and the date at the top. Material changes to our Notice of Privacy Practices are posted on that page directly, with an updated effective date.

Contact

Questions about privacy? Email hello@atticushealth.com. A person reads it.