HIPAA & Data Security
How we protect the information healthcare providers trust us with. Last updated: October 26, 2026.
Medical billing only works on trust. Elite Bill Care LLC handles billing information for healthcare providers across the United States, and protecting that information — including protected health information (PHI) — is built into how we operate.
We act as a business associate
Under HIPAA, a company that handles PHI on behalf of a healthcare provider is a business associate. Before we access any client PHI, we sign a Business Associate Agreement (BAA) with the provider. The BAA sets out exactly how PHI may be used and disclosed (only to provide the agreed services), the safeguards we must maintain, and our duty to report incidents. If there is ever a conflict between this page and a signed BAA, the BAA governs.
Our safeguards
- Administrative: access to client systems is limited to the team members who need it for their work; confidentiality obligations apply to everyone who handles client information; PHI is used only for the client's agreed services.
- Technical: client work is performed inside the client's own practice systems, EHR and payer portals wherever possible, so patient data stays in the systems the provider already controls; access credentials are individual, never shared casually, and are removed when an engagement or a team member's role ends.
- Physical / organisational: client documents and data are not kept on personal devices or public file-sharing services; we keep only the working information an engagement requires.
Minimum necessary
We follow HIPAA's minimum necessary principle: we request, use and share only the PHI needed to perform a specific billing task — verifying eligibility, submitting and tracking claims, posting payments, working denials and receivables, and supporting credentialing and enrollment.
Website visitors: please never send PHI — patient names, insurance IDs, clinical details — through this website's contact or consultation forms or by ordinary email. Those channels are for business enquiries only. Clients exchange PHI with us exclusively through the secure systems and channels set out in their agreements.
Incidents and questions
If we become aware of an incident involving a client's PHI, we notify the client in accordance with the timelines and duties in the BAA and applicable law, and cooperate with the client's investigation. Clients and prospective clients may request a copy of our BAA and ask questions about our safeguards at any time using the contact below.
Not a certification claim
HIPAA does not issue "certifications", and we do not claim any third-party certification we do not hold. This page describes our commitments and working practices; the binding obligations are those in each client's signed BAA and services agreement.
Elite Bill Care LLC
Email: info@elitebillcare.com | Phone: +1 (469) 854-1568
