Lyra Wellbeing Hub is a mental health support app developed by Lyra International Tech Limited. It gives employees 24/7 access to counsellors by phone or chat, along with a library of articles and videos, as part of Lyra’s Employee Assistance Programme (EAP).

With Lyra Wellbeing Hub, employers can offer staff and their families confidential mental health resources, from self-guided content to one-on-one counselling.

Is Lyra Wellbeing Hub HIPAA compliant? Yes, based on our research, Lyra Wellbeing Hub can be HIPAA compliant.

 

What changed this year?

As of October 2026, our review did not identify any publicly disclosed changes to Lyra Wellbeing Hub HIPAA-related policies or BAA terms.

 

Will Lyra Wellbeing Hub sign a business associate agreement (BAA)?

Yes, Lyra Wellbeing Hub will sign a BAA, which can be reviewed here.

 

What does the Lyra Wellbeing Hub BAA cover?

The Lyra Wellbeing Hub BAA covers the use and disclosure of protected health information (PHI), stating PHI under its care “is securely transmitted, retained, processed, and disposed of in compliance with HIPAA requirements.”

Their BAA covers:

  • Protection of PHI
  • Notifications of security incidents
  • Access by HHS requests
  • Individual Right of Access requests
  • Individual accounting requests
  • Return of PHI

What does the Lyra Wellbeing Hub BAA exclude?

Lyra Health, Inc. provides administrative and technology services, while counselling is delivered by licensed clinicians at independently owned practices. Notes kept by these clinicians fall outside Lyra’s own privacy practices.

Lyra’s HIPAA notice says clinical, substance use disorder, and psychotherapy notes captured by a provider “would be subject to his or her separate HIPAA privacy practices.”

Lyra Wellbeing Hub is also built by Lyra International Tech Limited, while Lyra’s published HIPAA commitments come from its US parent, Lyra Health. Covered entities should confirm their BAA extends to the Hub before using it with PHI.

 

Conclusion

Lyra Wellbeing Hub signs a BAA and is therefore HIPAA compliant.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQs

What is a BAA?

A BAA is a legally binding contract establishing a relationship between a covered entity under HIPAA and its business associates. The purpose of this agreement is to ensure the proper protection of PHI as required by HIPAA regulations.

 

What is HIPAA?

HIPAA sets national standards for protecting the privacy and security of certain health information, known as PHI.

HIPAA protects the privacy and security of individuals’ health information and ensures healthcare providers and insurers can securely exchange electronic health information. HIPAA violations can result in significant fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities performing certain functions or activities on behalf of the covered entity.