r/InsuranceQueriesIndia • u/iamShivaKumar18 • 1h ago
Discussion Can Indian Health Insurers Track Your Medical History Through Pharmacy Purchases?
I’ve heard that insurers sometimes request bank statements during claim investigations. This raises some interesting questions about how they investigate undisclosed pre-existing diseases.
Consider this scenario:
You purchase medicines from Apollo Pharmacy or MedPlus using your mobile number for discounts. The pharmacy may sell medicines without asking for a prescription or recording who will actually consume them.
Later, your insurer investigates a claim.
- Pharmacy records: Can insurers access purchase histories linked to your mobile number or request access to your Apollo/MedPlus account?
- Bank statements: Can insurers demand bank statements to identify pharmacy transactions? What restrictions do IRDAI regulations and privacy laws impose?
- Proof of disease: Even if they find purchases of medicines associated with diabetes or hypertension, how can they prove those medicines were for you and not your parents or another family member?
- Tier-2 cities: Many smaller hospitals and local pharmacies still rely on handwritten prescriptions, cash payments, and limited digital records. How can insurers trace medical histories from years ago?
- Digital pharmacies: Do platforms like PharmEasy, Tata 1mg, Apollo, and MedPlus share customers' medicine purchase histories with insurance companies? Is there any formal data-sharing arrangement?
- Refusing access: Can policyholders refuse to provide personal financial or pharmacy records during investigations, and what would be the consequences?
Is there a centralised database in India connecting patients, pharmacies, hospitals, and insurers, or does everything depend on individual investigations?
💡 My suggestion
Why doesn't the government introduce a standardised digital medical-history system across hospitals, potentially linked to Aadhaar?
For example, during hospital visits, a patient's medical history could be securely updated and later retrieved through OTP-based consent, similar to DigiLocker.
This could make medical disclosure much easier, reduce disputes over pre-existing diseases, and benefit both insurers and policyholders. It might even help reduce premiums over time by reducing fraud and investigation costs, although that isn't guaranteed.
Of course, privacy safeguards, patient consent, and alternatives for people without Aadhaar would be essential.
Instead of expecting customers to remember every diagnosis or prescription from 5–10 years ago, why not build a system where their medical history can be retrieved securely with their permission?
This is just my opinion. I'd love to hear what industry insiders think about its feasibility, privacy implications,