Your health data is sacred.
We built Basion on one principle: patient data is not a product. Everything we do — from architecture to business model — reflects that commitment.
Patient bill of rights.
Six commitments we make to every person who trusts us with their health information.
Your data is yours
You can see, download, or delete everything we have about you at any time. No exceptions, no delays.
We never sell your data
Your health information is never sold to advertisers, data brokers, or any third party. Period.
Consent is required
Before your data is used for research or shared with partners, you give explicit, informed consent. You can withdraw it at any time.
We explain in plain language
No legal jargon. We explain what we do with your data, why we do it, and who sees it — in language anyone can understand.
We protect your identity
When data is used for research or shared with partners, it is de-identified. Your name and personal details are never attached.
Right to be forgotten
Request deletion of your account and all associated data. We will comply within 30 days and confirm in writing.
How we protect your data.
All data is encrypted at rest and in transit using AES-256 and TLS 1.3. We conduct regular third-party security audits and penetration tests.
Our infrastructure is hosted on certified cloud providers with data residency in the United States. We implement role-based access controls, audit logging, and automated threat detection.
We maintain a formal incident response plan and will notify affected users within 72 hours of any confirmed data breach, in compliance with applicable state notification requirements.
How we use your data.
What we do.
- To power your patient tools (with your consent)
- To match you with clinical trials (with your consent)
- To build your medical necessity case (with your consent)
- To improve the platform (anonymized, aggregated only)
What we never do.
- Sell your data to anyone
- Share with manufacturers without your consent
- Use your data for advertising
- Share with employers or insurers
Data portability.
Your data belongs to you. We make it easy to take it with you or remove it entirely.
We comply with all data portability requests within 30 days.