Use explicit, purpose-specific consent before retrieving or transmitting banking, bureau, Account Aggregator or lender data. Record consent version, purpose, source and timestamp.
Do not request diagnosis or clinical records merely to calculate a amount needed. Use treatment price/coverage/payment status where sufficient. Production needs secure storage, role-based access and retention/deletion controls.
Share a few basic details. Avoid diagnosis, prescriptions or other sensitive medical information here.