Privacy Policy & HIPAA Authorization Notice
Last Updated: November 2026
1. Role as Authorized Retrieval Agent & Business Associate
USMedicalRecords.com operates as an independent medical record retrieval and litigation support courier service authorized directly by patients (under 45 CFR § 164.524) or their legal representatives (under 45 CFR § 164.508(c)). All Protected Health Information (PHI), patient identifiers, and authorization packets are transmitted over 256-bit TLS encryption and used strictly for the purpose of fulfilling the customer's designated medical record, itemized billing, or diagnostic imaging request.
2. Information Collected During Intake
When you place a retrieval order on USMedicalRecords.com, we collect the patient's full legal name, date of birth, optional partial Social Security Number or Medical Record Number (MRN), target healthcare facility details, dates of service, electronic signature executing the 45 CFR § 164.508(c) / § 164.524 release, and billing/payment credentials required to process your order.
3. Strict Non-Sale of Health or Legal Data
We never sell, rent, or monetize patient health information, legal matter captions, or contact details to third-party marketers, data brokers, or unauthorized entities. Information is shared exclusively with the designated healthcare provider's Health Information Management (HIM) department, Patient Financial Services (Billing) department, Radiology Film Library (PACS), or their contracted Release-of-Information (ROI) vendor solely to complete your retrieval order.
4. Data Retention & Deletion Requests
Customers may request permanent deletion of their completed retrieval packet and authorization logs at any time after record delivery by contacting our compliance desk at privacy@usmedicalrecords.com.