Skip to main content

Website security program

How this site is protected.

You are asked to share real details about your household and your health to get an accurate quote. This page explains what we do to protect that, what we will never ask you for, and how to tell us if something looks wrong.

Last updated August 17, 2026

Our approach

My Live Health LLC maintains technical and organizational safeguards designed to protect the personal information we collect, use, and store. The program covers this website, the quote and enrollment flow it hands off to, and the internal systems where inquiries are worked by licensed agents. We review it as the site changes rather than treating it as a one-time exercise.

The principle underneath all of it is to collect as little as we need, keep it only as long as we need it, and let as few people touch it as possible. What we collect and how long we keep it is described in the privacy center.

Protecting information in transit

Every page on this site is served over HTTPS, so the connection between your browser and our servers is encrypted using current transport layer security. Forms submit over that same encrypted connection. If your browser ever warns you that the connection to this site is not secure, stop and tell us; that is worth knowing about immediately.

Protecting stored information

Information you submit is stored with hosting and service providers that offer encryption at rest, network isolation, and audited operational controls. Access to production systems is restricted, credentials are not shared between people, and multi-factor authentication is used on the accounts that administer our systems. Application secrets and API keys are held in managed configuration rather than in source code.

Who can see your information

Access follows least privilege: people get the access their job requires and nothing beyond it. Licensed agents see the inquiry they are working. Administrative access to underlying systems is limited to the small number of people who maintain them. Access is reviewed when someone changes role and removed when someone leaves.

Service providers

We rely on third parties for hosting, email and message delivery, phone service, customer relationship management, and analytics. Each of them processes information on our behalf under a written contract that limits what they may do with it and requires them to protect it. We prefer established providers with published security practices, and we remove integrations we no longer need rather than leaving them connected.

Monitoring and change control

Application and infrastructure logs are retained so that unusual activity can be investigated. Dependencies are patched as updates are published. Changes to the site go through review before they are released, and releases can be rolled back quickly if a problem appears.

What you can do

  • Check that the address bar says mylivehealth.com before you type anything into a form. Look at the whole domain, not just the part that looks familiar.
  • Use a device and network you trust. Avoid entering personal details over public Wi-Fi you do not control.
  • Keep your browser and operating system updated, and use unique passwords with a password manager.
  • Do not email us medical records, your Social Security number, or your full member ID. Email is not a secure channel, and we do not need those to answer a plan question.
  • Read the explanation of benefits your plan sends. It is the first place a misused member ID shows up.

Reporting a security concern

If you find a vulnerability in this site, or you believe your information has been exposed, email contact@mylivehealth.com with “Security” in the subject line, or call (833) 741-1902. Tell us what you found, the page or request it affects, and how to reproduce it. We will acknowledge the report and tell you what we are doing about it.

We welcome good faith research and we will not pursue action against a researcher who reports a finding responsibly: test only against your own data, do not access or alter anyone else's information, do not degrade the service for other people, and give us a reasonable chance to fix the issue before publishing it. Denial of service testing, social engineering of our staff or customers, and physical attacks are out of scope.

Reporting a suspicious message or call

Forward suspicious emails or screenshots of suspicious texts to contact@mylivehealth.com and tell us what the caller or sender asked for. If you already gave out information or sent money, treat it as fraud and act today. The fraud, waste and abuse page lists the steps and the offices that can act on it.

An honest limit

No method of transmitting or storing information is completely secure. We use safeguards designed to protect your information, but we cannot promise that a determined attacker will never defeat them, and transmission of information to and from this site is at your own risk. That is a statement of fact about the internet, not a reason for us to do less.

Know the difference

Four things we will never do.

Impersonation is the most common attack aimed at people shopping for coverage. If any of these happens, it is not us.

We will never

Ask for a password

Not by phone, not by email, not by text. No employee of My Live Health needs your password to any account, ever, and nobody here will ask you to read one out.

We will never

Ask you to forward a code

A verification code sent to your phone is for you to type into the page that requested it. If someone asks you to read a code to them, it is a takeover attempt.

We will never

Demand unusual payment

We do not take gift cards, cryptocurrency, wire transfers, or payment apps. Premiums are paid to your insurance company, not to us.

We will never

Rush you with a threat

Nobody legitimate tells you that coverage disappears in ten minutes. Urgency is the oldest tool in the fraud kit. Hang up and call us back at the number on this site.