Is iMessage HIPAA compliant?

No

Apple's iCloud terms say covered entities and business associates will not use the service to 'create, receive, maintain or transmit any protected health information' or in any way that would make Apple their business associate. We found no BAA from Apple for Messages.

What to use instead

Sources

• www.apple.com/legal/internet-services/icloud/

Last verified 2026-09-24. General information, not legal advice.