Privacy
HCA sends information to the Centers for Medicare and Medicaid Services (CMS) for people who are enrolled in Apple Health programs that get federal funding, including Apple Health Expansion. This is required by law. Apple Health clients may view the client frequently asked questions (FAQ) ( available in 20 languages ) to learn more about their privacy and how their information is shared. For the most up to date information regarding use of Apple Health client data, view the Apple Health data privacy document .
On August 13, 2025, a federal judge granted a preliminary injunction to block the Department of Homeland Security (DHS) from using Medicaid data obtained from Washington and 19 other plaintiff states for immigration enforcement purposes.
On December 29, 2025, a federal court ruled that CMS could provide DHS data on individuals who are not lawfully present. In order for CMS to provide client data to DHS, DHS must provide CMS a list of individuals they believe to be not lawfully present.
The federal court decision limits CMS data sharing to name, citizenship and immigration status, address, phone number, and Medicaid ID number with DHS. CMS cannot release medical records or information about individuals that are lawfully present.
This is an active lawsuit, and HCA will continue to update this webpage and resources as updates become available.
We collect, use, and share the following information about you:
Your personally identifying information, such as your name, address, and social security number.
Information relating to your enrollment in Apple Health, such as what program you’re enrolled in, start and end dates of your coverage, your household size, and your income.
Information relating to your health, such as services you have received, clinical notes, prescriptions, and what health care providers you have visited.
Apple Health Expansion will use existing Apple Health program data privacy and protection standards to ensure clients’ identity and information remain confidential. View HCA's notice of privacy practices for more information.