Workflow & Automation · empirical.healthEmpirical Health
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
“To market our Products and Services . We may share your Personal Information with affiliates and third parties to market our products and services. However, Empirical Health does not use or disclose to third parties data gathered from the Clinical Health Records API, HealthKit API, Motion and Fitness, and MovementDisorder APIs for advertising, marketing, or…”
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Privacy and data use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Defines additional categories of Personal Information collected, specifically geolocation data (physical location, movements, local time, time zone) and user-generated content posted publicly or transmitted to other users or third parties.
Describes the use of cookies, web beacons, and similar technologies by the company and its service providers to automatically collect and store information during user interactions with the Platform or Services, and defines session cookies and their automatic deletion behavior.
Grants qualifying resident users the right to request information about disclosures of their personal information to third parties for direct marketing purposes, including categories of personal information shared and the identities of those third parties.
How to read this page: Overall risk rates what Empirical Health's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 52 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 52 citationsLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Permits sharing personal information with affiliates and third parties for marketing purposes, but explicitly restricts use of data gathered from specified health-related APIs — prohibiting its use for advertising, marketing, or other use-based data mining beyond health management or health research, and conditioning research use on user permission — a partially protective restriction on sensitive health data.
" To market our Products and Services . We may share your Personal Information with affiliates and third parties to market our products and services. However, Empirical Health does not use or disclose to third parties data gathered from the ..."
Describes that when a user contacts the company directly (e.g., customer support), the company receives the message contents, attachments, and any additional information the user chooses to provide, establishing a collection procedure for inbound communications.
" When You Contact Us . When you contact Empirical Health directly, such as when you contact our Customer Support team, we will receive the contents of your message or any attachments you may send to us, as well as any additional information..."
Permits sharing of personal information with affiliates, vendors, service providers, business partners, data hosting and storage partners, analytics and advertising providers, technology service providers, data security advisors, and professional advisors including auditors, law firms, and accounting firms for business purposes.
" Our business purposes . We may share your Personal Information with our affiliates, vendors, service providers, and business partners, including our data hosting and data storage partners, analytics and advertising providers, technology se..."
Permits transfer of personal information to a buyer or successor entity in the event of a merger, divestiture, restructuring, reorganization, dissolution, bankruptcy, liquidation, or similar asset transfer proceeding.
" Business transfer . We may share your Personal Information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as ..."
Clause B states the platform does not control third-party data collection, yet it simultaneously offers users an opt-out for third parties collecting their personal information for targeted advertising, implying a level of control or facilitation that contradicts the 'no control' claim.
" California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Platform and/or the Services that are California residents and who provide Personal Information in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Information to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Information and the names and addresses of those businesses with which we shared your Personal Information with for the immediately prior calendar year (e.g. requests made in 2023 will receive information regarding such activities in 2022). You may request this information once per calendar year. To make such a request, please Contact Us using the information below."
" This section of our Privacy Policy provides details and explains how to exercise your choices. We offer you choices on how you can opt out of our use of tracking technology, disclosure of your Personal Information for our advertising to you, and other targeted advertising. We do not control the collection and use of your information collected by third parties . These third parties may aggregate the information they collect with information from their other customers for their own purposes. You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative’s (NAI) opt-out page and the Digital Advertising Alliance’s (DAA) opt-out page ."
Within one documentClause A implies a general right for users to access the platform, with the consequence of agreeing to terms, while Clause B explicitly prohibits individuals under 18 from using the platform, creating conflicting guidance for minors regarding their ability to use the service.
" Please take a moment to review this Privacy Policy. You may scroll through this Privacy Policy or use the headings below. It is important that you understand this Privacy Policy. By using our Platform, you are agreeing to the terms of this Privacy Policy. If you have any questions or concerns about this Privacy Policy, you may Contact Us at any time."
" We do not knowingly collect or sell Personal Information from children under the age of 18. If you are under 18 years of age, you must get permission from your parents or legal guardian before using our Platform. If you are under the age of 18, do not use or provide any information on or to the Platform or through any of its features. If we learn we have collected or received Personal Information from a child under the age of 18 without verification of parental consent, we will delete it. If you are the parent or guardian of a child under 18 years of age whom you believe might have provided use with their Personal Information, you may Contact Us to request the Personal Information be deleted."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Geolocation data Physical location or movements, local time, and local time zone. User Generated Content Information you provide to be published or displayed (hereinafter, “Posted”) on public areas of our Website or transmitted to other users of the Website or other third parties. "
Defines additional categories of Personal Information collected, specifically geolocation data (physical location, movements, local time, time zone) and user-generated content posted publicly or transmitted to other users or third parties.
AI-generated interpretation, not legal advice.
" Cookies . We and our service providers may use cookies, web beacons, and other technologies to receive and store certain types of information whenever you interact with our Platform or Services through your computer or mobile device. A “cookie” is a small file or piece of data sent from a website and stored on the hard drive of your computer or mobile device. Some of the cookies we use are “session” cookies, meaning that they are automatically deleted from your hard drive after you close your browser at the end of your session. Session cookies are used to optimize performance of the Website and to limit the amount of redundant data that is downloaded during a single session. We also may use “persistent” cookies, which remain on your computer or device unless deleted by you (or by your browser settings). We may use persistent cookies for various purposes, such as statistical analysis of performance to ensure the ongoing quality of our Platform and/or the Services. We and third parties may use session and persistent cookies for analytics and advertising purposes, as described herein. On your computer, you may refuse to accept browser cookies by activating the appropriate setting on your browser, and you may have similar capabilities on your mobile device in the preferences for your operating system or browser. However, if you select this setting you may be unable to access or use certain parts of our Platform or the Services. Unless you have adjusted your browser or operating system setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Platform."
Describes the use of cookies, web beacons, and similar technologies by the company and its service providers to automatically collect and store information during user interactions with the Platform or Services, and defines session cookies and their automatic deletion behavior.
AI-generated interpretation, not legal advice.
" California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Platform and/or the Services that are California residents and who provide Personal Information in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Information to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Information and the names and addresses of those businesses with which we shared your Personal Information with for the immediately prior calendar year (e.g. requests made in 2023 will receive information regarding such activities in 2022). You may request this information once per calendar year. To make such a request, please Contact Us using the information below."
Grants qualifying resident users the right to request information about disclosures of their personal information to third parties for direct marketing purposes, including categories of personal information shared and the identities of those third parties.
AI-generated interpretation, not legal advice.
" We may share Personal Information with third parties in certain circumstances or for certain purposes, including:"
Grants general permission to share personal information with third parties in specified circumstances or for specified purposes, introducing the enumerated sharing categories.
AI-generated interpretation, not legal advice.
" Our business purposes . We may share your Personal Information with our affiliates, vendors, service providers, and business partners, including our data hosting and data storage partners, analytics and advertising providers, technology services and support, and data security advisors. We may also share your Personal Information with professional advisors, such as auditors, law firms, and accounting firms."
Permits sharing of personal information with affiliates, vendors, service providers, business partners, data hosting and storage partners, analytics and advertising providers, technology service providers, data security advisors, and professional advisors including auditors, law firms, and accounting firms for business purposes.
AI-generated interpretation, not legal advice.
" De-identified information . We may also disclose de-identified information, so that it cannot be reasonably used to identify any individual, with third parties for marketing, advertising, research, or similar purposes."
Permits disclosure of de-identified information — processed so it cannot reasonably identify any individual — to third parties for marketing, advertising, research, or similar purposes.
AI-generated interpretation, not legal advice.
" This Privacy Policy does not apply to information collected from users who log-in to the password-protected and secure portions of our Platform (“ Secure Platform ”). The Secure Platform allows users who obtain the Services (“ Customers ”) to perform certain functions or obtain the Services (such as telehealth visits from Medical Group or Providers). All information collected and stored by us or added by Customers into such Secure Platforms is considered Protected Health Information (“ PHI ”) and/or medical information and is governed by applicable state and federal laws that apply to that information, for example the Health Insurance Portability and Accountability Act (“ HIPAA ”). How we use and disclose such PHI is in accordance with the applicable Notice of Privacy Practices provided to you by the Medical Group. We will not use or disclose information collected from the Secure Platform or received from Medical Group or your Provider for advertising, marketing, or other use-based data mining purposes except as otherwise permitted by HIPAA and other applicable law. We will not sell any PHI in violation of HIPAA."
Carves out the Secure Platform and its users from this Privacy Policy's coverage, stating that information collected there constitutes PHI or medical information governed by applicable laws rather than this Policy, and defines key terms (Secure Platform, Customers, PHI).
AI-generated interpretation, not legal advice.
" We do not knowingly collect or sell Personal Information from children under the age of 18. If you are under 18 years of age, you must get permission from your parents or legal guardian before using our Platform. If you are under the age of 18, do not use or provide any information on or to the Platform or through any of its features. If we learn we have collected or received Personal Information from a child under the age of 18 without verification of parental consent, we will delete it. If you are the parent or guardian of a child under 18 years of age whom you believe might have provided use with their Personal Information, you may Contact Us to request the Personal Information be deleted."
Prohibits knowing collection or sale of personal information from users under age 18 without verified parental consent, requires deletion of such data if discovered, and restricts platform use by minors to those with parental or guardian permission — protective of minors' data.
AI-generated interpretation, not legal advice.
" This Privacy Policy does not apply to information collected by any other website operated either by us or by a third party, unless the website is listed above or links to this Privacy Policy. It also does not apply to any website that we may provide a link to or that is accessible from our Platform."
Establishes that the Privacy Policy does not govern information collected by other websites operated by the company or third parties (unless listed or linked to this Policy), carving out those contexts from the Policy's obligations.
AI-generated interpretation, not legal advice.
" Some Personal Information we collect may constitute PHI under HIPAA. As set forth above, your Provider will provide you with a Notice of Privacy Practices describing their collection and use of your PHI, not Empirical Health. We will only collect and use PHI for the purposes of providing the Platform and Services and we only collect the minimum amount necessary to fully perform and provide the Services on our Platform. We may combine your PHI with Personal Information that we have either obtained from you or through a third-party, such as your Provider, health insurer, employee benefits program, or other health care providers. PHI will only be used and disclosed as outlined in the Notice of Privacy Practices and as permitted by HIPAA and other applicable law."
Restricts the company's collection and use of PHI to the purpose of providing the Platform and Services, requires collection of the minimum amount necessary, and permits combination of PHI with other Personal Information only from specified sources (the user, the Provider, health insurer, or employee benefits programs); also clarifies that PHI notices come from Providers, not the company.
AI-generated interpretation, not legal advice.
" When you make payments through the Platform . We do not collect or store financial account information, though we may receive transaction identifiers and summary information that does not include credit card or bank account numbers."
Restricts the company from collecting or storing financial account information; permits only receipt of transaction identifiers and summary information that excludes credit card or bank account numbers, limiting the scope of financial data processing.
AI-generated interpretation, not legal advice.
" Empirical Health operates subject to state and federal regulations, and the Platform and/or the Services may not be available in your state. You represent that you are not a person barred from enrolling for or receiving the Services under the laws of the United States or other applicable jurisdictions in which you may be located. Access to and use of the Platform and/or the Services is limited exclusively to users located in states within the United States where the Platform and/or the Services is available. The Platform and/or the Services are not available to users located outside the United States. Accessing the Platform and/or obtaining the Services from jurisdictions where content is illegal, or where we do not offer the Platform and/or the Services, is prohibited."
Restricts access to and use of the platform and services exclusively to users located in states within a specified country where the service is available, prohibiting access by users outside those states, and requires users to represent they are not legally barred from enrolling or receiving services.
AI-generated interpretation, not legal advice.
" To market our Products and Services . We may share your Personal Information with affiliates and third parties to market our products and services. However, Empirical Health does not use or disclose to third parties data gathered from the Clinical Health Records API, HealthKit API, Motion and Fitness, and MovementDisorder APIs for advertising, marketing, or other use-based data mining purposes other than improving health management, or for the purpose of health research, and then only with your permission."
Permits sharing personal information with affiliates and third parties for marketing purposes, but explicitly restricts use of data gathered from specified health-related APIs — prohibiting its use for advertising, marketing, or other use-based data mining beyond health management or health research, and conditioning research use on user permission — a partially protective restriction on sensitive health data.
AI-generated interpretation, not legal advice.
" We may collect and use the following personal information (hereinafter, collectively referred to as “Personal Information”):"
Introduces the collective definition of 'Personal Information' by signaling that the following enumerated types are collectively referred to by that term throughout the document.
AI-generated interpretation, not legal advice.
" Categories of Personal Information Specific Types of Personal Information Collected Personal Identifiers A real name, birth date, e-mail address, unique personal identifier, IP Address, driver’s license number, postal address, or Patient ID. Information that identifies, relates to, describes, or is capable of being associated with a particular individual physical characteristics or description, telephone number, driver’s license number, insurance policy number, health insurance information, signature, medical conditions, medications currently taking or prescribed, blood group, physician, emergency contacts, drug testing, and psychological trends. Characteristics of protected classifications under California or federal law Race, Color, Genetic Information (including familial genetic information), Age, Ancestry, Sex, Sexual Orientation (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions) Veteran or Military Status, or Disability. Biometric information Photos, video, and voice, voiceprints, gait patterns, sleep data, physiological characteristics (e.g. BMI, heart rate, heart rate variability, oxygen saturation, electrocardiograms, and accelerometer information), behavioral characteristics (e.g. sleep, exercise, and stress), and biological characteristics (e.g. blood test results, imaging results, CT scans, MRIs). Internet or other electronic network activity information IP address, OS version, operating system, browser type, log file information, and information regarding a consumer’s interaction with an internet web site, application, or advertisement. "
Enumerates specific categories and types of Personal Information collected (including personal identifiers, physical characteristics, health insurance details, medical conditions, and similar data), establishing the scope of data subject to the Policy's obligations.
AI-generated interpretation, not legal advice.
" Fulfill any other purpose for which you provide it."
Grants the platform permission to use personal information for any other purpose for which the user provides it, creating an open-ended authorization tied to user-supplied context.
AI-generated interpretation, not legal advice.
" Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection."
Obligates the platform to use personal information to carry out contractual obligations and enforce its rights, including billing and collection activities.
AI-generated interpretation, not legal advice.
" Respond to law enforcement requests, court orders, and subpoenas and to carry out our legal and contractual obligations."
Establishes an obligation to use personal information to respond to law enforcement requests, court orders, and subpoenas, and to fulfill legal and contractual duties.
AI-generated interpretation, not legal advice.
Common questions about Empirical Health's policies
- Can you use Empirical Health's output commercially?
- Commercial use allowed — based on 1 verified finding from Empirical Health's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Empirical Health's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Empirical Health's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Empirical Health's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Empirical Health requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Empirical Health's published policies yet.
What the policies actually cover
0 topicsNone of Empirical Health's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“We do not knowingly collect or sell Personal Information from children under the age of 18. If you are under 18 years of age, you must get permission from your parents or legal guardian before using our Platform. If you are under the age of 18, do not use or provide any information on or to the Platform or through any of its features. If we learn we have collected or received Personal Information from a child unde...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Geolocation data Physical location or movements, local time, and local time zone. User Generated Content Information you provide to be published or displayed (hereinafter, “Posted”) on public areas of our Website or transmitted to other users of the Website or other third parties.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Cookies . We and our service providers may use cookies, web beacons, and other technologies to receive and store certain types of information whenever you interact with our Platform or Services through your computer or mobile device. A “cookie” is a small file or piece of data sent from a website and stored on the hard drive of your computer or mobile device. Some of the cookies we use are “session” cookies, meani...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may share Personal Information with third parties in certain circumstances or for certain purposes, including:”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Our business purposes . We may share your Personal Information with our affiliates, vendors, service providers, and business partners, including our data hosting and data storage partners, analytics and advertising providers, technology services and support, and data security advisors. We may also share your Personal Information with professional advisors, such as auditors, law firms, and accounting firms.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 4 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
| Api | commercial use | conditional | MEDIUM | 1 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“Geolocation data Physical location or movements, local time, and local time zone. User Generated Content Information you provide to be published or displayed (hereinafter, “Posted”) on public areas of our Website or transmitted to other users of the Website or other third parties.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Cookies . We and our service providers may use cookies, web beacons, and other technologies to receive and store certain types of information whenever you interact with our Platform or Services through your computer or mobile device. A “cookie” is a small file or piece of data sent from a website and stored on the hard drive of your computer or mobile device. Some of the cookies we use are “session” cookies, meaning that they are automatically deleted from your hard drive after you close your browser at the end of your session. Session cookies are used to optimize performance of the Website and to limit the amount of redundant data that is downloaded during a single session. We also may use “persistent” cookies, which remain on your computer or device unless deleted by you (or by your browser settings). We may use persistent cookies for various purposes, such as statistical analysis of performance to ensure the ongoing quality of our Platform and/or the Services. We and third parties may use session and persistent cookies for analytics and advertising purposes, as described herein. On your computer, you may refuse to accept browser cookies by activating the appropriate setting on your browser, and you may have similar capabilities on your mobile device in the preferences for your operating system or browser. However, if you select this setting you may be unable to access or use certain parts of our Platform or the Services. Unless you have adjusted your browser or operating system setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Platform.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may share Personal Information with third parties in certain circumstances or for certain purposes, including:”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“Our business purposes . We may share your Personal Information with our affiliates, vendors, service providers, and business partners, including our data hosting and data storage partners, analytics and advertising providers, technology services and support, and data security advisors. We may also share your Personal Information with professional advisors, such as auditors, law firms, and accounting firms.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“De-identified information . We may also disclose de-identified information, so that it cannot be reasonably used to identify any individual, with third parties for marketing, advertising, research, or similar purposes.”Open timeline citation
Latest stance: third party or vendor sharing on commercial use
“To market our Products and Services . We may share your Personal Information with affiliates and third parties to market our products and services. However, Empirical Health does not use or disclose to third parties data gathered from the Clinical Health Records API, HealthKit API, Motion and Fitness, and MovementDisorder APIs for advertising, marketing, or other use-based data mining purposes other than improving health management, or for the purpose of health research, and then only with your permission.”Open timeline citation
Latest stance: sale or sell on privacy data use
“We do not knowingly collect or sell Personal Information from children under the age of 18. If you are under 18 years of age, you must get permission from your parents or legal guardian before using our Platform. If you are under the age of 18, do not use or provide any information on or to the Platform or through any of its features. If we learn we have collected or received Personal Information from a child under the age of 18 without verification of parental consent, we will delete it. If you are the parent or guardian of a child under 18 years of age whom you believe might have provided use with their Personal Information, you may Contact Us to request the Personal Information be deleted.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Platform and/or the Services that are California residents and who provide Personal Information in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Information to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Information and the names and addresses of those businesses with which we shared your Personal Information with for the immediately prior calendar year (e.g. requests made in 2023 will receive information regarding such activities in 2022). You may request this information once per calendar year. To make such a request, please Contact Us using the information below.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
67 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Empirical Health's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Empirical Health's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Empirical Health's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.