Pick a route
An error in something we published
- Use it for
- A wrong claim, a misread study, a grade you think is indefensible, a broken citation, a stale price. Include the URL and, if you can, a citation — it roughly halves the time it takes.
- Not for
- A question about your own health. We cannot answer it and we will not try.
- How long we take
- Acknowledged within five working days. A factual error is corrected within ten working days of us confirming it, and the correction is published.
Privacy, your data, and privacy requests
- Use it for
- Access, correction, deletion, and the Washington My Health My Data consumer health data right to withdraw consent and delete. We verify identity before acting.
- Not for
- Do not send health details to prove who you are. We will tell you what we need, and it is never a lab result.
- How long we take
- Within 45 days of a verified request, extendable once by a further 45 days with notice — the common denominator of the state laws, applied to everyone in the US rather than only where it is mandatory.
A security vulnerability
- Use it for
- Anything that could let someone reach data they should not, especially health data. Include reproduction steps and your assessment of impact.
- Not for
- Scanner output with no demonstrated impact, or a missing-header report with no exploit path. The scope list is on the security page.
- How long we take
- Acknowledged within one working day, triaged with a severity within five. We offer safe harbour for good-faith research and will not involve lawyers over it.
Clinic and lab support
- Use it for
- Claiming a listing, correcting your own details, verification audits, leads, the Health Data Hub, billing. Claiming and correcting are free and always will be.
- Not for
- Asking us to remove a review, or to change an evidence grade. Neither is for sale and neither has an escalation path that is. Review reports go through the portal against the published guidelines.
- How long we take
- Two working days. Billing and verification questions may take longer because they involve a second person.
Press
- Use it for
- Put "Press" in the subject line and your deadline in the first sentence. For a question about a specific grade we will connect you with the reviewer who signed it, on the record.
- Not for
- Requests for member or patient data in any form, including aggregated. There is no version of that we will provide.
- How long we take
- One working day, or same day if you tell us the deadline is today.
A safety concern about a listed clinic
- Use it for
- If you believe a clinic is operating unsafely or you were harmed. Put "Safety" in the subject. This goes to a named person, is triaged within one working day, and is escalated to the relevant regulator where appropriate.
- Not for
- A public review. A safety allegation does not belong in a review section, and we remove allegations of a crime or negligence from reviews while leaving the rest of the review intact.
- How long we take
- Triaged within one working day. We will not discuss your report with the clinic without your permission.
Statutory routes for your region
You are reading the US market, which is governed by HIPAA where we act as a business associate of a covered entity, plus US state privacy law. These are the routes that law specifically requires, and where to go if we fail you.
- Privacy requests
- privacy@longlifelist.com — Access, correction, deletion, and the Washington My Health My Data consumer health data right to withdraw consent and delete. We verify identity before acting.
- If we do not resolve it
- Federal Trade Commission — For unfair or deceptive practices, including under the Health Breach Notification Rule.
- Your state Attorney General — State privacy laws are enforced by state Attorneys General.
- HHS Office for Civil Rights — For HIPAA complaints, where a covered entity or its business associate is involved.
Full detail, including your rights and the deadline we are held to, is in the privacy policy and the health data notice.
What we cannot help with
- Your own health. We are not a clinical service and we cannot interpret your results, suggest a dose, or tell you whether to start or stop something. Ask a clinician who knows your history.
- Booking, rescheduling, refunds or complaints about care you received. That is between you and the clinic — we are not a party to it — though a safety concern about a listed clinic does come to us.
- Removing a review because you disagree with it. Reviews come down for breaching the published review guidelines and for nothing else.
- Changing an evidence grade without evidence. Bring a study and it goes to the review board; bring commercial pressure and it goes nowhere.