Why doesn't Freshpaint need a BAA before sending data to Google Ads and Facebook Ads?
In general, a BAA is needed when sending PHI to a third party. PHI is defined as including both an identifier and health information, together.
Freshpaint provides a way for its customers to send only identifiers or only health information to a third party.
Since measuring ad campaign outcomes via Google and Facebook only requires identifiers and not health information, Freshpaint strips out all health information and sends only identifiers, therefore maintaining compliance without requiring a BAA.