Your hospital has your data. Getting it back shouldn't require a lawyer.
(But it does. So we become your legal representative.)
acta.bio goes to every hospital, lab, insurer, and clinic that holds your medical and genomic data. We take legal action in your name. They hand it over. You get everything in one place — download it all, anytime.
Pursuant to GDPR Article 15 and applicable data access regulations, you have 30 days to release all records for this individual.
The current situation
Your medical data is scattered across 15+ institutions. None of them want to give it back.
Your primary care doctor has some of it. The specialist you saw three years ago has more. Your old insurer has claims data. That lab test from 2019? Sitting on a server in a different state.
Every one of them will make you fill out a different form. Some want it faxed. Faxed. In 2026. Others will take 6 to 8 weeks and then ask you to call back. A few will just ignore you entirely because they know most people give up.
This is your data. By law, you own it. But try actually getting it and you'll understand why we exist.
City General Hospital
Records from 2018 - 2024
Requested 47 days ago
GenomicsLab Inc.
Full WGS + panels
3rd request attempt
BlueCrest Insurance
Claims 2020 - 2023
It's been 3 Mondays
Midwest Pathology
Blood panels, biopsies
In 2026. Fax.
+ 11 more institutions
What we actually do
We're your personal Karen.
You sign one authorization. We do everything else. We send legal demand letters citing GDPR Article 15 and every applicable data access regulation. Institutions have 30 days to comply. If they don't, we sue on your behalf — and you share in the winnings.
Google "how to request medical records"
Find out every institution has a different process
Fill out 15 different forms
Some are PDF. Some are paper. One is a fax. No, really.
Wait 6 - 8 weeks per institution
Multiply that by 15. That's most of a year.
Half of them don't respond
You follow up. They ask for the form again. Repeat.
Give up
Like 96% of people do
Sign one authorization
Takes about 2 minutes. That's the last thing you do.
We send legal demands to every institution
Citing GDPR and all applicable data access regulations. Simultaneously.
They comply within 30 days
Funny how fast bureaucracy moves when lawyers are involved.
All your records in one place. Download everything anytime.
Your data, your vault, your download
My Health Vault
End-to-end encrypted
City General Hospital
GenomicsLab Inc.
BlueCrest Insurance
7
Sources
143
Records
100%
Retrieved
Your vault
One place. Every record. Finally.
Imagine having your complete medical history in one place you can actually download. Not scattered across patient portals that don't talk to each other. Not locked behind phone trees and fax machines.
Everything in one app. Download it all anytime. Your data is end-to-end encrypted — we can't read it. Nobody can, unless you say so.
End-to-end encryption. We literally cannot see your data.
Export anytime. It's your data. Take it wherever you want.
We never share it. Not with advertisers, not with partners, not with anyone. Period.
The marketplace
We never sell your data. But you can.
Pharmaceutical companies spend billions buying access to health data. Right now, they buy it from hospitals and data brokers. You, the person the data belongs to, get nothing.
On acta.bio's marketplace, researchers post what data they need for their studies. If your profile matches, you get an offer. You decide yes or no. You set the price. We never see the data itself — we just facilitate the match.
Your body produced this data. It's about time you got paid for it.
Cardiovascular Outcomes Study
Tier-1 Research University -- Anonymized access to cardiac history
$340
Genomic Biomarkers for Drug Response
Pharma R&D Division -- WGS data with phenotype correlation
$1,200
Diabetes Prevention Longitudinal Study
National Health Institute -- Annual check-in, metabolic data
$180/yr
Your total earnings
$1,720 this year
The obvious question
"Why should I trust you with my data?"
Fair question. Short answer: you don't have to. We use end-to-end encryption, which means we physically cannot access your data. Not "we promise we won't." We architecturally can't. The encryption keys live on your device, not on our servers.
Encrypted architecture
Your data is encrypted before it leaves your device. We store ciphertext. If someone broke into our servers, they'd get gibberish.
Legal fiduciary
We act as your legal representative. That means we have a legal duty to act in YOUR interest, not ours. If we screw you over, you can sue us. That's by design.
We make money only when you do
We take a cut of marketplace transactions. If you never sell access to your data, we earn nothing from it. Our incentive is always aligned with yours.
Stop asking nicely for your own data.
One authorization. Every institution. 30 days. We handle the legal demands, the follow-ups, and the bureaucratic nonsense. You just get your data.
Free to start. No credit card required.