HugoScore hugoscore.org

Full review

Carey CAIHL draft report

Evidence-linked HugoScore draft report for a health AI tool that affects patients.

HugoScore CAIHL Draft Report: Carey

Status: Draft for human review Generated: 2026-06-08 Last reviewed: 2026-06-12 Review method: Deep public-source review of official product page plus full terms and privacy policy text rendered on 2026-06-12. No vendor interview or hands-on testing. Service: Carey Vendor: General Care Inc. d.b.a. Carey Category: Patient care navigation and health copilot AI

Executive Summary

Carey is a patient- and family-facing care concierge that uses AI and human support to schedule appointments, manage refills, follow up with offices, and keep families updated.

From a CAIHL perspective, Carey is potentially agency-expanding because it addresses the administrative burden of healthcare navigation. It also requires more accountability than an informational chatbot because it may act on a patient's behalf. The draft caveats are authorization, human-agent access, call logging, correction, revocation, pricing, and a verified HIPAA-status tension: the homepage says "HIPAA Certified & Compliant," while Carey's terms and privacy policy say Carey is not a HIPAA covered entity.

Agency posture: Potentially agency-expanding Confidence: Low-to-medium draft, legal docs reviewed

Evidence

Mixed HugoScore Profile

  • Who does this AI serve? Patient-directed, delegated navigation. It is built for families and caregivers handling healthcare tasks.
  • Can patients tell AI is involved? Yes. The homepage describes AI and human support.
  • Can patients meaningfully choose? Partial. Use is voluntary, but delegation and authorization controls need review.
  • Can patients correct or challenge what the AI produces? Partial. Status visibility is described, but audit, correction, and complaint workflows are not fully disclosed. Terms also require binding arbitration, waive jury trial and class actions, and cap liability.
  • Does it help patients understand or act? Yes. Scheduling, refills, calls, follow-ups, and summaries are directly action-oriented.

Patient Agency Interpretation

Carey could increase patient agency by taking on the system-navigation work that exhausts patients and caregivers. Its key CAIHL risk is delegated action: acting for a patient is powerful only if authority, privacy, correction, and revocation are visible and controlled by the patient.

The 2026-06-12 legal-document review improves confidence in the data-governance facts but also sharpens the caution. Carey documents easy deletion by email or texting RESET and says Google Calendar access is limited to free/busy availability. It also says anonymized data may be retained indefinitely, used to improve AI training, and shared with vendors, research institutions, or commercial partners. The homepage's HIPAA-compliance language should be read beside the legal text saying Carey is not a HIPAA covered entity or business associate.

Publication Recommendation

Keep as draft and low-to-medium confidence. Privacy-policy text and HIPAA-status language have now been verified, but the profile still needs review of authorization workflow, human-agent access controls, call handling and recording, audit/correction workflows, pricing, and how the HIPAA marketing language is operationalized.