1 min read

Is HelpCrunch HIPAA compliant?

HelpCrunch logo
HelpCrunch logo Adding a live chat to your practice’s website can increase engagement with current and potential customers. However, the way you use these products must not violate HIPAA or put protected health information (PHI) in jeopardy.  Today let’s look at HelpCrunch for HIPAA compliance.

About HelpCrunch

HelpCrunch is a customer communication platform. Features include live chat for web and mobile applications, email marketing, marketing automation, and help desk.

 

HelpCrunch and business associate agreements

To stay HIPAA compliant, a covered entity and a business associate must sign a business associate agreement (BAA).  We did not find any information about BAAs on HelpCrunch’s website.

 

HelpCrunch and PHI

The safety of PHI is one of the most crucial parts of staying HIPAA compliant. Any type of information that can be used to identify a patient or is used during patient care is considered PHI.  There is no reference to PHI on HelpCrunch’s website.  In fact, according to its privacy policy, HelpCrunch collects personal information from its users and grants personal data access to third-parties.  Personal information can include names, time zone, operating systems, API tokens, emails, and billing information.  However, the company states that users have the “right to be forgotten” under certain instances and the right to restrict personal data processing. For full information on HelpCrunch’s Privacy Policy, click here

 

Conclusion

We found no information about HelpCrunch’s willingness to execute a BAA. Therefore, HelpCrunch is not HIPAA compliant.  Furthermore, those who choose to use HelpCrunch need to be conscious of the information shared on and with the platform as the company collects information about its users.

 

Using HelpCrunch in a HIPAA compliant manner

Healthcare providers might still consider adding a chatbot to their website as another way to communicate with patients, but they need to make sure they are not sharing any PHI on or with the platform.

 

Effortless communication with HIPAA compliant email

Providers who would like an easy, direct communication line to their patients should consider adding a HIPAA compliant email solution, like Paubox Email Suite , to their services.  With Paubox Email Suite, all outbound emails encrypt by default. Our solution integrates directly into your existing email platform (such a Microsoft 365 or Google Workspace ). Paubox Email Suite requires no change to your email behavior.  Paubox Email Suite requires no passwords or patient email portals as all emails are delivered directly to your patient’s inbox.
 
Try Paubox Email Suite for FREE today.
Doctor writing notes at desk with HIPAA Audit nameplate

How to conduct a HIPAA compliance audit

Conducting a HIPAA compliance audit of your practice is a great way to asses compliance with current regulations and identify areas that need to...

Read More
Close-up of pixelated padlock and HTTPS text on blue digital display

Technical safeguards for a HIPAA compliant mental health website

Compliance with the Health Insurance Portability and Accountability Act (HIPAA) is required for mental health practice websites that handle protected...

Read More
Woman presenting to a group at a whiteboard

How to create HIPAA compliance policies for a mental health practice

Mental health practices are required to be HIPAA compliant. Developing comprehensive written policies and procedures is a component of HIPAA...

Read More

Subscribe to Paubox Weekly

Every Friday we bring you the most important news from Paubox. Our aim is to make you smarter, faster.