Your data lives in our HIPAA-compliant cloud in the U.S. Think of it like a safety-deposit box with two keys: one is strong encryption, the other is strict access controls. Only a small, background-checked team can access specific pieces to help you (e.g., fix a bad connection, resolve a mismatch, fulfill a deletion).
Bottom line: you control what’s connected, and you can disconnect or request deletion anytime. In certain cases, if you’ve received medical care through Lotus, we may be required to keep your medical records after you close your account.