Is FaceTime HIPAA compliant? Does it sign a BAA?
The answer
Does not sign a BAA
No. Apple's iOS and iPadOS software license, under which FaceTime is provided, says a HIPAA covered entity or business associate will not use Apple's software or services to create, receive, maintain or transmit protected health information, or in any way that would make Apple its business associate.
Video, reviews and SMS. Checked on the vendor's own pages on .
Using FaceTime on a healthcare site? Curve Compliance keeps your ad tracking HIPAA-compliant around it, under a BAA on every plan. Book a call
On this page
What Apple says
“If you are a HIPAA covered entity or business associate, you will not use the Apple Software, Apple Services, or any component or function thereof, to create, receive, maintain or transmit any sensitive, individually-identifiable health information, including protected health information, or use the Apple Software or Apple Services in any manner that would make Apple (or any Apple Subsidiary) your or any third party’s business associate.”
“Certain system services made available through the Apple Software, including FaceTime, Messages, and Siri ("System Services"), are provided to you by the Apple entity identified below based on your country or region of residence.”
What this means for ad tracking
A FaceTime call can be a quick video visit or a follow-up, and a booked or completed visit is a strong sign that an ad worked. The call itself, and the names and times around it, are care.
Because Apple's license bars protected health information and business associate use, FaceTime should not carry patient visits, and a visit you count as a conversion should reach your ad platforms as a neutral event with no visit details.
Curve Compliance closes that gap: it sends the conversion itself server-side, under a BAA it signs on every plan, so your campaigns keep a conversion signal without a pixel carrying patient data. Book a call to see it on your own funnel.
How Curve helps
- Curve gives you a conversion signal that does not depend on FaceTime or a browser pixel carrying patient details.
- Server-side conversion tracking in place of pixels: conversions reach your ad platforms from Curve's server, not from the patient's browser.
- A fixed field list per platform, so each ad platform receives only the fields set for it.
- PHI-like pattern detection checks every event before it goes out, and neutral event names keep conditions and treatments out of what the platforms see.
- When identifiers are enabled, Curve hashes them with SHA-256.
- Consent management for your site, alongside the tracking.
- A HIPAA-compliant setup done by Curve's team, with a BAA signed on every plan.
Book a call with Curve and Curve's team will walk through your tracking setup with you.
Frequently asked questions
Is FaceTime HIPAA compliant?
No. Apple's iOS and iPadOS software license, under which FaceTime is provided, says a HIPAA covered entity or business associate will not use Apple's software or services to create, receive, maintain or transmit protected health information, or in any way that would make Apple its business associate. Without a BAA, FaceTime should not receive patient information.
Does FaceTime sign a BAA?
No. Apple's iOS and iPadOS software license, under which FaceTime is provided, says a HIPAA covered entity or business associate will not use Apple's software or services to create, receive, maintain or transmit protected health information, or in any way that would make Apple its business associate. In Apple's words: “If you are a HIPAA covered entity or business associate, you will not use the Apple Software, Apple Services, or any component or function thereof, to create, receive, maintain or transmit any sensitive, individually-identifiable health information, including protected health information, or use the Apple Software or Apple Services in any manner that would make Apple (or any Apple Subsidiary) your or any third party’s business associate.” We checked Apple's own pages on October 5, 2026.
Can I use FaceTime for telehealth visits?
Not under a BAA from Apple, based on its own pages. Apple's license says a HIPAA covered entity or business associate will not use its software or services in any manner that would make Apple a business associate, so keep patient visits off FaceTime and use a video tool that signs a BAA with you.
Can I still track ad conversions for video visits?
Yes, when the conversion reaches your ad platforms without health information. Curve sends conversions server-side under a BAA it signs on every plan, with neutral event names and SHA-256 hashed identifiers.
Does Curve Compliance sign a BAA?
Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup for you. Book a call to get started.
Sources
Last checked . Vendors change their plans and terms, so confirm the current terms with Apple before you send it patient data.
Related tools
- Does Zoom sign a BAA?Signs a BAA on specific plans. Paid plans such as Pro, Business, Business Plus and Enterprise.
- Does Doxy.me sign a BAA?Signs a BAA. All plans; Clinic BAA for groups.
- Does iMessage sign a BAA?Does not sign a BAA. License bars PHI and business associate use.
- Does iCloud sign a BAA?Does not sign a BAA. Terms bar PHI and business associate use.
- Does Meta sign a BAA?Does not sign a BAA. Business Tools Terms bar health information.
- Does Google Ads sign a BAA?Does not sign a BAA. Google Ads call terms disclaim HIPAA.
Track ad conversions under a BAA
Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.
Book a call