Effective date: September 24, 2026
This Consumer Health Data Privacy Policy supplements the Steward Privacy Policy. It describes how Field Runtime LLC, operator of Steward ("Steward," "Field Runtime," "we," "us," or "our"), collects, uses, discloses, and deletes consumer health data.
This policy is intended to provide the disclosures required by Washington's My Health My Data Act and applies when Steward handles information that identifies or can reasonably be linked to a person's past, present, or future physical or mental health status.
Health-data, privacy, and support requests: support@fieldruntime.ai
Mail: Field Runtime LLC, 688 110th Ave NE, Bellevue, WA 98004, United States
1. Consumer health data we collect
When you choose to use Steward for a medical-billing or health-related household matter, we may collect:
- healthcare provider, facility, insurer, pharmacy, or administrator names;
- patient, subscriber, guarantor, household-member, insurance-member, claim, or account identifiers appearing in the information you provide;
- dates of service, billing dates, due dates, statement dates, and payment-plan dates;
- medical-bill, explanation-of-benefits, claim, reimbursement, credit, payment-plan, installment, balance, adjustment, and payment information;
- descriptions, codes, or other information about healthcare services, procedures, medication, diagnosis, treatment, or insurance coverage when they appear in a document you provide;
- communications about a medical bill, claim, denial, appeal, reimbursement, provider promise, or payment arrangement;
- your instructions, corrections, approvals, and preferences concerning those records;
- source references, extracted candidate facts, Case status, next steps, evidence, action reports, and verification status created from those records; and
- inferences necessary to organize the requested financial matter, such as whether two documents may refer to the same bill or whether a claimed credit remains unverified.
Please provide only the information needed for the household financial task. Steward does not need genetic test results, clinical notes, detailed diagnoses, biometric identifiers, precise location information, or unrelated treatment records for its initial medical-billing service.
2. Why we collect and use consumer health data
We use consumer health data only for purposes disclosed in this policy or separately presented to you, including to:
- organize a medical bill or insurance-related household obligation;
- identify candidate amounts, dates, providers, account references, and changes;
- compare selected bills, explanations of benefits, credits, reimbursements, or payment plans;
- maintain a source-linked Case and show what is known, unknown, waiting, disputed, or completed;
- prepare a household brief or update a household financial plan;
- identify missing evidence or a recommended next step;
- prepare an action handoff for your explicit review and approval;
- receive an action result and determine whether evidence supports completion;
- preserve your corrections, decisions, permissions, and audit history;
- respond to access, deletion, withdrawal, or appeal requests;
- secure the service, prevent fraud or duplicate actions, troubleshoot problems, and comply with law; and
- perform other uses to which you separately and affirmatively consent.
We do not use consumer health data for advertising, determining eligibility for employment, credit, housing, insurance, or healthcare, or training general-purpose AI models.
3. Sources of consumer health data
We receive consumer health data from:
- you, including information you enter or files you select;
- Muse or another connected service when you direct or authorize it to send selected information to Steward;
- a household participant through a supported sharing feature when appropriate permission has been granted;
- bills, explanations of benefits, insurer or provider communications, receipts, and other records you choose to provide; and
- information Steward derives from those sources for the requested household financial task.
Steward does not independently access your medical provider portal, insurer account, bank account, or email account at launch.
4. Consumer health data disclosed or processed by others
We disclose or permit processing of only the consumer health data reasonably necessary for the requested service:
- Amazon Web Services processes encrypted application records, database content, storage, and backups as Steward's hosting infrastructure.
- TypeSafe AI / Jev may process selected document text, candidate values, and limited Case context for narrow classification or extraction tasks when that processing is enabled.
- Meta / Muse may provide consumer health data to Steward and receive a source-linked summary, recommendation, approval request, action handoff, or result when you request the task through Muse. Muse's independent handling is governed by Meta's applicable terms and policies.
- Professional advisers, authorities, or transaction participants may receive limited information when legally required or reasonably necessary to protect rights, respond to lawful process, handle a covered business transaction, or obtain professional advice, subject to applicable law.
- A recipient you direct may receive information when you specifically direct Steward to provide it and the service supports the disclosure.
The categories disclosed may include the identifiers, medical-billing information, communications, derived Case information, and action or verification records described in Section 1, but only to the extent reasonably necessary for the applicable purpose.
Field Runtime has no affiliate with which it shares consumer health data at the effective date of this policy.
Processors may process consumer health data only under binding instructions that limit processing to the contracted service and require appropriate assistance with applicable consumer requests. If those contractual protections are not in place for a processor, Steward will not send real consumer health data to that processor.
We do not sell consumer health data. We do not disclose it for cross-context behavioral advertising.
5. Consent and your directions
Before Steward first collects consumer health data, we present a clear health-data notice and obtain any affirmative consent required for the specified purpose. Acceptance of general Terms of Service alone is not health-data consent.
When separate consent is legally required to disclose consumer health data, the disclosure request is presented separately from collection consent and identifies the relevant categories, purpose, recipients, and withdrawal method. Some processing or exchange may instead be necessary to provide a product or service you specifically requested, as permitted by applicable law.
You may withdraw consent for future collection or disclosure by using an available account control or contacting support@fieldruntime.ai. Withdrawal does not invalidate processing that was lawful before withdrawal, but Steward will stop future processing covered by the withdrawal unless another legal basis applies. Withdrawing a permission may prevent Steward from completing the corresponding medical-billing task.
6. Your consumer health data rights
Subject to applicable law, you may request to:
- confirm whether we collect, share, or sell consumer health data concerning you;
- access that consumer health data;
- obtain a list of third parties and affiliates with whom your consumer health data was shared or sold, including available contact information;
- withdraw consent for future collection or disclosure;
- delete consumer health data concerning you; and
- appeal our refusal to act on a request.
Submit a request to support@fieldruntime.ai or through an available in-account privacy control. You do not need to create a new account solely to submit a request, although we may ask you to use an existing account or provide information reasonably necessary to authenticate the request.
We provide required information free of charge up to twice annually. We may charge a reasonable fee or decline a request only when permitted by law, such as when a request is manifestly unfounded, excessive, or repetitive.
We respond without undue delay and within 45 days after receiving a request. We may extend the response once by up to 45 additional days when reasonably necessary and will provide notice and an explanation within the initial period.
7. Deletion
When we grant an authenticated deletion request, we delete covered consumer health data from active systems and notify processors, contractors, affiliates, and other recipients as required so they can honor the request.
Encrypted backups follow a 30-day scheduled expiry cycle. If deletion from an archived or backup system must be delayed to permit safe restoration, the delay will not exceed the period allowed by applicable law. Data subject to a deletion request is not available for ordinary processing while awaiting scheduled deletion. If a backup is restored, the deletion request must be reapplied.
We may retain information only when and to the extent a legal exception applies. We will explain a material denial or delay where required.
8. Appeals
If we refuse to act on your consumer health data request, you may appeal by emailing support@fieldruntime.ai with the subject line Consumer Health Data Appeal. Describe the request and why you believe the decision should be reconsidered.
We will respond to the appeal in writing within 45 days and explain the action taken or not taken. If we deny the appeal, we will provide a method to contact the Washington State Attorney General. You may also visit https://www.atg.wa.gov/file-complaint.
We will not unlawfully discriminate against you for exercising a consumer health data right.
9. Retention and security
We retain consumer health data while your account is active and as reasonably necessary to provide the medical-billing or household financial service you requested. We may retain limited information longer where legally required or reasonably necessary for security, fraud prevention, dispute handling, or enforcement of our agreements.
We restrict access to people and processors for whom access is necessary for the requested purpose. We use safeguards designed for the nature of the information, including access controls, encrypted transmission, encrypted backups, separation of public and private systems, authentication controls, logging restrictions, and recovery procedures. No online system can guarantee absolute security.
10. Children
Steward accounts are available only to adults aged 18 or older. An authorized adult may provide limited information concerning a dependent's medical-billing obligation when necessary for the requested household service. Do not provide information about another person unless you are authorized to do so.
11. Changes to this policy
We will update the effective date and provide appropriate notice when this policy changes. We will not collect, use, or disclose additional categories of consumer health data, or use existing data for a materially different purpose, without first making the required disclosure and obtaining affirmative consent where required.
12. Contact
Field Runtime LLC
688 110th Ave NE
Bellevue, WA 98004
United States
Health-data, privacy, and support requests: support@fieldruntime.ai
Public policy location: https://fieldruntime.ai/steward/health-data