WellnessLiving is business management software for fitness, wellness, and beauty businesses. It offers appointment scheduling, client management, payment processing, staff management, and email and SMS marketing tools. WellnessLiving

Is WellnessLiving HIPAA compliant? Yes, WellnessLiving is HIPAA compliant.

 

What changed this year?

WellnessLiving’s Business Terms and Conditions show an August 14, 2026 update, and its Privacy Policy became effective on August 18, 2026.

As of September 2026, BAA availability remains confirmed. Our review did not identify a public announcement withdrawing the BAA or narrowing its coverage, but changes to the agreement itself could not be independently verified without the full document.

The current privacy policy also addresses personalized in-app marketing for Achieve (Basic) users, stating that using protected health information (PHI) for that personalization requires legally sufficient authorization.

 

Will WellnessLiving sign a business associate agreement (BAA)?

Yes, WellnessLiving offers a BAA. Section 5.2(e) of its Business Terms and Conditions instructs HIPAA-regulated customers to request one and enter into it before using the service.

 

What does the WellnessLiving BAA cover?

The full BAA was not available in the public sources reviewed. Section 5.4 of WellnessLiving’s business terms states that its use of PHI must be “expressly permitted in this Agreement and our BAA.”

Its security framework separately describes:

  • Encryption in transit and encryption at rest for databases and file storage containing sensitive data.
  • Employee access restricted according to job responsibilities.
  • Continuous security monitoring and 24/7 incident response.
  • Breach notification under applicable privacy laws, including HIPAA.
  • Third-party HIPAA audits. WellnessLiving Help Center

These are published security practices, rather than a verified list of BAA provisions; customers should review the agreement for its exact coverage.

 

What does the WellnessLiving BAA exclude?

Specific excluded services or data types could not be verified from the public sources reviewed.

WellnessLiving’s security framework states that “businesses using our software must ensure their practices are also HIPAA-compliant.” This describes the customer’s responsibilities and does not establish particular BAA exclusions.

Before using email, SMS, AI features, or third-party integrations with PHI, confirm that the agreement covers the intended use and that appropriate safeguards are in place.

 

Conclusion

WellnessLiving is HIPAA compliant with a signed BAA and appropriate organizational practices.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQs

What is a BAAt?

A BAA is a legally binding contract establishing a relationship between a covered entity under HIPAA and its business associates. The purpose of this agreement is to ensure the proper protection of PHI as required by HIPAA regulations.

 

What is HIPAA?

HIPAA sets national standards for protecting the privacy and security of certain health information, known as PHI.

HIPAA is designed to protect the privacy and security of individuals’ health information and to ensure that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in significant fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.