Last Updated: [Month Day, Year]

EverGrace Financial (“EverGrace”) is committed to protecting sensitive health-related information in accordance with applicable privacy and security requirements.

While EverGrace is not a healthcare provider or insurer, certain medical-related fundraisers require the handling of medical billing information. This page explains how EverGrace approaches HIPAA-related responsibilities.

How HIPAA Applies to EverGrace

EverGrace may receive or review medical billing information solely for the purpose of verifying medical expenses submitted as part of a fundraiser.

• EverGrace is not a Covered Entity under HIPAA
• EverGrace is not a healthcare provider
• EverGrace does not provide medical services

However, we treat medical billing information with heightened safeguards and respect for patient privacy.

Medical Bill Verification

For medical fundraisers, EverGrace may:

• Review medical billing statements provided by the fundraiser organizer
• Contact healthcare billing offices only to confirm billing details
• Verify account balances, dates, and billing accuracy

EverGrace does not:

• Access medical records beyond billing information
• Review diagnoses, treatment notes, or clinical records
• Share medical information beyond what is necessary for verification

Authorization & Consent

Medical fundraisers require explicit consent from the individual whose bill is being verified.

This may include:

• A signed HIPAA authorization
• Consent to contact the healthcare provider’s billing department
• Consent to confirm that the bill relates to the named individual

Without consent, medical fundraisers cannot be approved.

Safeguards for Medical Information

EverGrace applies additional protections to medical-related information, including:

• Restricted internal access
• Secure storage and transmission
• Limited use strictly for verification purposes
• Retention only as long as necessary

Your Rights

Individuals may request:

• Information about how their medical billing data is used
• Correction of inaccurate information
• Deletion of information when legally permissible

Requests can be submitted to:
Email: privacy@evergracefinancial.com

Transparency Commitment

EverGrace believes donor protection and patient dignity go hand in hand. Our verification process exists to ensure funds are used responsibly — without compromising personal privacy.