Is Hello Patient HIPAA compliant?

Hello Patient (Patient Engagement Technologies, Inc.) signs a Business Associate Agreement for Hello Patient, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use Hello Patient with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies.

Does Hello Patient sign a BAA?

Yes, it signs a BAA

Hello Patient publishes a BAA that is incorporated into its subscription terms and takes effect when a customer accepts them, with no separate signature. The BAA names its AI voice and text messaging features as eligible services and bars using PHI to train AI models without written permission.

Based on 4 sources, all from Hello Patient (Patient Engagement Technologies, Inc.) unless marked.

Business associate
Hello Patient (Patient Engagement Technologies, Inc.)
Tool
Hello Patient
Plans with a BAA
Hello Patient provider contract
Checked
Signs a BAA
Hello Patient (Patient Engagement Technologies, Inc.) signs a BAA for Hello Patient.

By plan

PlanBAAHow to get itConditions
Hello Patient provider contractSigns a BAAIncluded in the termsRequest pageThe published BAA (updated September 2026) is incorporated into the Master Subscription Agreement or Hello Patient Subscription Terms and is accepted by click-through or use of the services, with no separate signature. A July 2026 company post says each account has a BAA. No plan restrictions are stated.[1],[2],[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Hello Patient (Patient Engagement Technologies, Inc.) says about each one.

AI featureUnder the BAADetails
Mia AI assistant (patient calls and SMS)CoveredThe BAA lists Hello Patient's AI voice and text messaging features among its eligible services. It bars using PHI to train or improve AI models without the customer's written authorization, though de-identified data may be used for model training. Subcontractors handling PHI must accept equally protective terms; no AI or LLM vendors are named.[1],[4]

Sources

  1. Business Associate Agreement (BAA)Patient Engagement Technologies, Inc., Legal terms. Checked Oct 13, 2026. Archived copy
  2. SOC 2 Type 2 certificationHello Patient, Announcement. Checked Oct 13, 2026. Archived copy
  3. Privacy Policy | Hello PatientPatient Engagement Technologies, Inc., Legal terms. Checked Oct 13, 2026. Archived copy
  4. Meet Mia | Hello PatientHello Patient, Documentation. Checked Oct 13, 2026. Archived copy

Change history

  1. Hello Patient — Hello Patient provider contract: updated how to get the BAA, conditions (our correction after re-checking the vendor's pages).
  2. Hello Patient — Mia AI assistant (patient calls and SMS): BAA coverage changed from Unknown to Covered (our correction after re-checking the vendor's pages).

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.