Carrot Fertility Privacy Policy

Item: Carrot Fertility
Rating: 15
Author: Privacy.Law Editorial Team

Last updated: November 2024 | Reviewed: February 2026

Reimbursement model requires uploading extensive medical documentation. Claims processing exposes sensitive health data to multiple parties, and vendor access is broadly defined.

Grade F

Privacy Summary: Carrot's reimbursement model requires patients to upload detailed medical records, receipts, and treatment documentation. This sensitive data is processed by claims reviewers, stored in Carrot's systems, and shared with various vendors. The documentation burden creates extensive privacy exposure.

Category Scores

Data Collection 12/100

Data Sharing 15/100

Data Retention 18/100

Security Measures 20/100

User Controls 12/100

Key Findings

🔎 Required Document Uploads

Carrot's reimbursement model requires uploading itemized medical bills, provider records, prescription information, and treatment documentation. This transfers custody of sensitive medical records to Carrot.

"To process reimbursement claims, you must submit itemized receipts, medical records, and other documentation demonstrating eligible expenses."

🔎 Human Claims Review

Submitted documentation is reviewed by Carrot employees and contractors for claims processing. Multiple individuals may access your sensitive medical records during the review process.

"Claims are reviewed by our clinical and administrative team to determine eligibility and appropriate reimbursement amounts."

🔎 Global Operations Data Flows

As a global platform, Carrot transfers data internationally. Claims processing and customer service may be handled in different jurisdictions with varying privacy protections.

"We operate globally and may transfer your information to countries outside your country of residence for processing and storage."

🔎 Extensive Vendor Ecosystem

Data is shared with a broad array of vendors for claims processing, document management, customer service, and analytics. Each vendor represents additional exposure risk.

"We share information with service providers who help us operate our business, including claims processors, document storage providers, and customer support vendors."

Data Collection Summary

Data Type	Collected	Risk Level
Medical Bills/Records	Uploaded	Critical
Treatment Documentation	Uploaded	Critical
Prescription Information	Uploaded	High
Provider Details	Yes	High
Claims History	Yes	High
Financial Information	Yes	High

Recommendation

Critical Privacy Risk: Carrot's reimbursement model requires you to proactively upload sensitive medical documentation, creating extensive data exposure. Unlike direct-pay models, you're handing over copies of your actual medical records.

For Users: Only upload documentation strictly required for reimbursement. Redact unnecessary personal details from documents. Understand that your medical records will be viewed by claims reviewers and potentially shared with vendors. Consider what treatment details you're comfortable having in Carrot's systems.