Does Abby share my data with third parties?

Does Abby Health share my data with third parties?

No — Abby Health does not sell your data, share it with advertisers, or hand it to insurers without your consent. Your medical and personal information is shared only with the clinicians involved in your care, with people you ask us to share with (like a specialist or your pharmacy), or where Australian law clearly requires it. Everything we do sits inside the Privacy Act 1988 and the Australian Privacy Principles.

What does "third party" actually mean?

A third party is anyone outside the immediate care relationship between you and Abby. That includes advertisers, data brokers, insurers, employers, social platforms, and analytics companies. The default rule is simple: your record stays inside Abby's care network unless you ask us to share it, or unless we are legally required to. The full set of patient rights is laid out in the OAIC privacy rights guide.

When does data move outside Abby?

There are a small number of legitimate reasons. We share information:

• With your consent — when you ask us to send a referral, prescription, or report to a specialist, hospital, allied health professional, or your nominated pharmacy.
• To deliver your care — for example, sending a script to your pharmacy or a pathology request to a collection centre. You see and approve these as part of your consult.
• With Medicare — to bulk bill your consult, we submit standard claim data to Services Australia, just as any GP clinic would.
• With My Health Record — only if you have an active record and have not opted out.
• Where the law requires it — mandatory reporting (such as certain notifiable diseases), valid court orders, or genuine safeguarding concerns.

Each of these has a clear purpose tied to your care or to a legal obligation. None of it involves selling data.

Who will never see my health information?

Some questions come up again and again. The answer is no in every case:

• Employers — your workplace cannot request or pull your record from us.
• Health and life insurers — we do not provide insurers with patient records or claim histories.
• Advertisers and data brokers — we do not sell, swap, or rent your information.
• Marketing platforms — your medical content is not used to target ads back at you.
• Family members — unless you ask us to involve them in your care.

If you want to share information with a family member or carer, you can authorise that in writing.

What about the technology Abby uses?

Like any modern clinic, Abby uses suppliers — for cloud hosting, secure messaging, and similar services. They are not "third parties" in the marketing sense. They are vendors bound by contract and by Australian privacy law to use your information only to provide the service we have asked them to provide. They cannot use your data for their own purposes, and access is limited under the Australian Privacy Principles.

What does Abby AI do with my data?

Abby AI, our medical decision-support tool, helps clinicians prepare for your consult by surfacing your past notes, medications, and follow-ups. It is not used to advertise to you, profile you, or train external models on your identity. It runs inside our environment, supports the clinician, and never diagnoses, prescribes, or replaces clinician judgement. You can read more in what Abby AI is — decision support explained.

How do I check or change what is shared?

You have rights you can use any time:

• Access — request a copy of your medical record.
• Correction — ask for inaccurate information to be corrected.
• Withdraw consent — change which providers can see your information going forward.
• Complain — raise a concern with us, and if we cannot resolve it, with the OAIC.

The fastest way to start is via Live Chat in the Abby app or by emailing support@abbyhealth.app. Our complaints process is detailed in how do I provide feedback or make a complaint.

What if there's a breach?

If a confirmed data breach is likely to cause serious harm, Abby is required to notify affected patients and the OAIC under the Notifiable Data Breaches scheme. We will tell you what happened, what was involved, and what to do next.

How Abby can help

If you have a specific question about how your information is used, our team is happy to walk you through it. Read more in your data at Abby — where it's stored, who sees it, or book a consult at abbyhealth.app. Abby appointments are bulk billed for eligible patients with a valid Medicare card.