Your patients' data: never sold, never trained on, never ours.
Careful doctors ask us hard questions about data before they join. Good. This page is every answer, in plain English. These are not aspirations; each one is backed by our contracts, and we will show you the paperwork if you ask.
We never sell your patients' data.
Not to brokers, advertisers, or pharma, at any price. Our only revenue is a share of your practice revenue.
Your patients' data never trains an AI model.
Zero-data-retention agreements with OpenAI and Anthropic: every request is processed, then discarded. We can show you the contracts.
You own your data. All of it.
We are the custodian, not the owner. Export everything, anytime, in standard formats, free.
Every AI request is covered by a BAA.
A complete BAA chain, including the AI providers. Agreements a solo practice cannot get on its own.
No advertising system touches patient data.
Identifiable patient health information never reaches advertisers or advertising networks. Period.
Access is narrow, encrypted, and accountable.
Encrypted in transit and at rest. Human access is limited to supporting your practice, and it is logged.
Your charts are not on the data networks.
No Carequality, CommonWell, or TEFCA. Records leave one at a time, verified, with a human in the loop.
Leaving is easy. Everything comes with you.
Your patients, records, and website go with you, with an orderly offboarding in writing.
Your patients get more privacy on Eureka than in your own setup
Most doctors using AI today are pasting notes into a consumer chatbot. Compare that with what your practice inherits here on day one.
Doctors on Eureka treat psychiatry, addiction medicine, and other conditions where discretion is not a feature, it is the treatment. Those doctors chose Eureka after asking everything on this page, and harder questions too.
The quiet back door in most EHRs
Most EHRs are on the grid
Most EHRs join nationwide record-sharing networks (Carequality, CommonWell). Any connected system can request your patients' charts, and the answer goes out automatically, machine to machine, without you seeing it. Built so an ER can pull records at 2 AM.
The grid has other users
Data vendors serving life-insurance underwriting openly advertise their reach into these networks to retrieve clinical records for risk scoring. On the network, your charts are part of the queryable surface, and the industry's own disputes over improper queries show the honor system is not always honored.
Eureka is off it, on purpose
Eureka's EHR is not connected to any of these networks, by design. When records need to move, a human moves them: verified, one patient at a time, to the destination you or your patient chose. There is no interface where a data vendor can come looking.
We protect your patients past our own walls
Patient data can reach an insurance underwriter through six channels, most of them outside any EHR. We researched all six, from FTC complaints to state statutes, and built the practice around closing every one we lawfully can.
Insurance claims
The biggest source: pharmacy claims billed through insurers and PBMs. A cash-pay practice never creates one.
Medical claims mining
Data products scan diagnosis codes on medical claims for substance-use and psychiatric care. No claims filed, no signal.
EHR network queries
Most EHRs answer automated chart queries from national networks. Eureka is connected to none of them.
Pharmacy data feeds
Chain pharmacies furnish fill data regardless of how the patient paid. We can route sensitive prescriptions to cash-only pharmacies that furnish nothing.
Lab history databases
Underwriters can pull seven years of results, including diagnosis codes, from the two biggest lab networks. We can route sensitive orders to labs outside them.
The patient's own consent
Records a patient authorizes when applying for coverage, and their duty to answer honestly. That door belongs to the patient, as it should.
Sensitive prescription and lab routing is in beta for doctors whose patients need it. Ask us for access. The full research, written for doctors and patients alike, is in our handbook, and every record release we do make is governed by our written records-release policy.
What we do store, and why
A trust page that only lists promises is a sales page. Here is the other half.
Eureka is your EHR, so your charts, notes, messages, and orders live in our database, encrypted in transit and at rest. That is the product doing its job. Medical records also have legally required retention periods, so when you ask us to delete data, we delete everything the law does not require us to keep, and we tell you exactly what remains and why.
We use analytics on our marketing site and product to understand usage and fix problems. Those tools never receive identifiable patient health information. The full legal detail lives in our privacy policy, which says the same things this page does, in longer sentences.
Data questions, straight answers
Will Eureka sell my patients' data?
No, never. We do not sell patient data to data brokers, advertisers, pharmaceutical companies, or anyone else. Our only revenue is a share of your practice revenue.
Is my patients' data used to train AI models?
No, ever. We have zero-data-retention agreements with our AI providers, OpenAI and Anthropic. Your patients' data is never stored by them and never used to train models. We can show you the contractual proof.
What is a zero-data-retention agreement?
A zero-data-retention (ZDR) agreement means the AI provider processes a request and then discards it. Nothing is stored on their servers and nothing can be used for training, because it no longer exists. These agreements are negotiated contracts, not settings toggles, and they are generally unavailable to an individual practice.
Do I need my own BAA with OpenAI or Anthropic?
No. The BAA chain is handled for you, including with the AI providers. That is the point: you get enterprise-grade agreements you cannot get as a solo user of a consumer AI tool.
What happens to my data if I leave Eureka?
Everything comes with you: your patients, your records, your website, and your PLLC. We export your data in standard formats at no charge and commit to an orderly offboarding in writing.
Who at Eureka can see patient records?
Access is limited to what is needed to support your practice, for example helping you troubleshoot a chart, and it is logged. Data is encrypted in transit and at rest.
Can insurance companies or data vendors pull my patients' records from Eureka?
No. Eureka is not connected to the national record-sharing networks (Carequality, CommonWell, TEFCA) that data vendors query for clinical records. Records leave Eureka only through verified, one-at-a-time releases: to your patient, to a recipient your patient directs in writing, to a clinician you send them to, or where the law compels it. There is no network interface to query.
Can you keep a prescription out of the databases insurers use?
We can close the passive trails. Sensitive routing (in beta) sends prescriptions to cash-only pharmacies that furnish no fill data and lab orders to labs outside the big underwriting-accessible networks, and our cash-pay model means no insurance claim ever exists. What we never touch: a patient's duty to answer insurance application questions honestly, and their right to direct their own records anywhere they choose.
I treat sensitive conditions. Is Eureka appropriate for my patients?
Yes. Doctors on Eureka treat psychiatry, addiction medicine, and other conditions where discretion is everything. The same promises apply to every chart: never sold, never trained on, never shared with advertisers.
Ask us the hard questions.
If your question isn't answered here, email support@eurekahealth.com and a founder will answer it in writing. Skepticism about where patient data goes is not an obstacle to working with us. It is the reason we wrote this page.