Yes. Oana takes the security of your personal and medical information seriously, and the platform is built around the security standards required for handling health information.
Here's what that means in practice:
Encrypted data transmission. Every interaction you have with Oana — completing your medical intake, messaging your clinician, viewing your prescriptions, updating your account — happens over encrypted connections. Your information is protected as it moves between your device and Oana's systems.
Encrypted data storage. Your medical records, personal information, and treatment history are stored using industry-standard encryption. Even within Oana's systems, your information is protected against unauthorized access.
Strict access controls. Only the clinicians directly involved in your care and the operations staff who need to handle your case have access to your information. Access is logged and reviewed.
HIPAA-compliant infrastructure. Oana's platform is built to meet the requirements of the Health Insurance Portability and Accountability Act (HIPAA), which governs how healthcare entities handle protected health information. See the next question for the full picture on HIPAA.
Your information isn't sold. Oana doesn't sell your personal data, your medical information, or your shopping behavior to third parties. Your information is used to provide your care and operate the platform — that's it.
Privacy considerations Oana has thought about specifically:
For women using Oana, privacy concerns often go beyond general data security. A few specific things worth knowing:
- Discreet shipping. Your medication arrives in plain packaging with no Oana branding or medication name visible. See "Is shipping discreet?" in the Shipping section for the full picture.
- No insurance involvement. Because Oana doesn't bill insurance, your treatment doesn't appear on insurance Explanation of Benefits statements that might be visible to family members on a shared policy.
- Account access is yours alone. Your account is protected by your login credentials. Oana doesn't share your information with family members, partners, or anyone else without your explicit authorization.
For the full picture of how Oana handles your information, see the Privacy Policy.
If you have specific questions about a privacy scenario — for example, who has access to specific records, how to download or delete your data, or how to handle a unique privacy situation — contact Oana support at support@oanahealth.com.