Built inside
the fences.
Health data is the most sensitive category there is. This page explains how LIFE OS is governed, in plain language, without asking you to take our word for it.
LIFE OS is a health data platform. It is not a medical device, a medical practice, or a healthcare provider, and it does not diagnose, prescribe, or treat.
What LIFE OS is
LIFE OS builds and operates the technology layer that holds a person's health record and connects it to the clinicians, pharmacies, laboratories, and devices that act on it. We are a technology and data company. Medical care is delivered by independently licensed clinicians who make their own clinical decisions.
Where LIFE OS handles protected health information on behalf of a covered entity, it does so as a business associate under a written business associate agreement. Our HIPAA Notice explains what that means for you.
Research and IRB
Our data collection methodology operates under Institutional Review Board approval. That approval governs how data is gathered, how consent is obtained, and how records are retained and reviewed.
Physician led studies conducted on the platform plug into that framework through a study specific protocol rather than beginning from zero. Participation in research is always separate from using the platform, always opt in, and always revocable. Data used for research is de-identified in accordance with applicable standards before it is analyzed.
- Every record event carries a timestamp, a source, and a change log.
- An audit trail exists for each interaction so a clinical claim can be traced to the reading that produced it.
- Adverse events reported through the platform are captured, reviewed, and escalated under documented procedure.
Privacy and security
Data is encrypted in transit and at rest. Access on the clinical side is role scoped, so a clinician sees the records they are authorized to see and nothing else. Administrative access is logged.
We do not sell personal information. We do not sell or share identifiable health information for advertising. Full detail is in the Privacy Policy.
Clinical boundaries
Ellen gives you context and helps you keep track of things. She surfaces patterns, explains changes, and flags what may deserve a clinician's attention. She does not diagnose, prescribe, treat, or replace clinical judgment, and the product is built so that she cannot.
The LIFE Score is a proprietary wellness metric. It is not a diagnostic instrument, not a clinical measure, and not validated as one. It exists to make a large amount of data legible at a glance.
Pharmacy and prescribing
Prescription products require evaluation by a licensed physician on our credentialed medical network. Compounded medications are prepared by licensed pharmacies and are not FDA approved products. We list only compounds that are permitted to be compounded under applicable federal and state rules, and we remove anything that falls outside those rules.
Three rules govern how prescribing works on the platform:
- Margin is excluded from routing. We choose a pharmacy on how fast and reliably they fill, what the patient pays, whether they are accredited, and whether they have capacity. What LIFE OS earns is not part of that call.
- Prescribers are never paid per prescription. Affiliate or per script compensation to prescribers is prohibited.
- Physician compensation runs through management services at fair market value, documented and reviewed by outside counsel.
Partners and vendors
Every vendor or partner that touches protected health information operates under a written business associate agreement or an equivalent data protection agreement. We maintain a current inventory of those relationships and review them on a defined cycle. Enterprise partners can request a security and compliance packet through the enterprise team.
Report a concern
If you believe your information has been handled improperly, if you spot a security issue, or if you want to report an adverse event, contact us through the contact page and select the relevant topic. Security reports are triaged on receipt.
Need more detail?
Enterprise partners can request a full security and compliance packet.