Your patient data, handled properly.
Billing means we handle protected health information every day. That responsibility shapes how we work, who can see what, and how everything moves between us and your payers.
How does MedBillPartner protect patient data?
MedBillPartner handles protected health information as a HIPAA Business Associate on behalf of the health centers and physician groups we bill for. We sign a Business Associate Agreement with every client, transmit claims through secure encrypted channels, restrict access to the staff who need it for their work, and train our team on HIPAA obligations.
The safeguards behind our billing.
Practical protections, not a wall of legal language.
What a Business Associate actually is.
The distinction matters, because it defines who is responsible for what.
You're the covered entity
Your health center or group holds the direct relationship with your patients and their records. Notices of privacy practices come from you, not from us.
We're your Business Associate
We handle protected health information only to perform billing services for you, under a signed agreement, and only for that purpose.
The BAA sets the rules
It defines how we may use data, what safeguards we maintain, what happens on termination, and what we owe you if something goes wrong.
It applies for the whole relationship
Those obligations hold from the day we start through the transition if you ever leave, including how data is returned or disposed of.
Security questions.
Will you sign a Business Associate Agreement?
Yes. We sign a BAA with every client before we handle any protected health information. It is a standard and expected part of working with a billing company, and we don't treat it as optional.
Is our data encrypted?
Yes. Claims and remittance information move over secure encrypted connections between us, your systems, and your payers. We don't send protected health information through unsecured channels.
Who at your company can see our patient data?
Only the staff whose work requires it. Access is assigned by role rather than given broadly, so someone who doesn't work on your account doesn't have access to your data.
Is your team based in the United States?
Yes. We're based in Anaheim, California, and our team works out of our Anaheim office. That matters for accountability, for time zones, and for many health centers' procurement requirements.
What happens to our data if we stop working with you?
The Business Associate Agreement governs it. We work with you through the transition, and your data is returned or disposed of according to the terms of that agreement rather than left sitting somewhere indefinitely.
Questions about how we would handle your data?
Ask us directly. We'll walk you through our safeguards and send our BAA for your team to review.
Last reviewed: August 2026