Abridge — privacy & data policy

Provider: Abridge. PromptPrivacy score: 48/100. Last verified October 18, 2026.

What happens to your data?

Abridge collects account details, device information, and website usage data to operate its services, personalize experiences, and conduct marketing. Clinical healthcare data and Protected Health Information (PHI) are governed separately under Business Associate Agreements rather than this general privacy policy. Certain identifiers and online interaction details are shared with third-party service providers, employers, and advertising partners.

Does it train on your data?

The policy notes that personal information is used to 'conduct research and development to enhance our products,' but it does not specify whether customer inputs or data are used to train general AI models. Optional voiceprints are collected specifically to improve dictation, speech recognition, speaker identification, and transcription accuracy within the mobile app. Processing of clinical Customer Data is governed exclusively by customer contracts and BAAs.

Can you opt out?

Yes. Users can opt out of marketing communications using email unsubscribe links, limit tracking via browser cookie preferences or Global Privacy Control (GPC), and submit requests to opt out of data sharing or request data deletion by contacting privacy@abridge.com.

Data retention

General personal data is retained as long as Abridge has an ongoing legitimate business need (such as legal, tax, or accounting requirements) and is deleted or anonymized when that need ends. Optional biometric voiceprint data is kept as long as needed to provide the feature and is permanently deleted after one year of account inactivity, upon account deletion, or upon user request. Customer Data retention is determined by individual customer contracts.

Encryption & security

Abridge states that it implements administrative, physical, and technical safeguards to protect personal data against unauthorized access, destruction, or alteration. Specific encryption protocols (such as TLS or AES) and compliance certifications (such as SOC 2 or ISO 27001) are not detailed in this policy document.

Is it safe for work?

Yes for healthcare organizations and business users operating under a formal customer agreement and Business Associate Agreement (BAA), which govern Protected Health Information and clinical Customer Data separately from this general policy. However, standard website and account interactions are subject to third-party advertising tracking.

Source policy: https://www.abridge.com/privacy-policy