Positive Airway Pressure and Your Privacy:

What You Should Know

How is my positive airway pressure (PAP) data collected and shared?

Newer PAP devices (including CPAP, APAP AND BPAP1) are generally equipped with modems or cellular capabilities that allow remote access to your machine data, which can include:

  • Your adherence: When are you using your machine? How often and for how long?
  • Treatment Efficacy: Is the treatment working? Are you still exhibiting sleep-disordered breathing? Is your mask leaking?

When obtaining your device from your physician/medical office or durable medical equipment2 (DME) company, you will be notified of the company’s data privacy policies and must authorize the collection and use of your information.  It is important to thoroughly read and understand all paperwork or forms prior to signing off on your machine and beginning use.

Who can access my data and why?

Once you begin using your machine, the data collected is remotely transmitted to the DME company or physician and/or your insurance company.  The information will also most likely be automatically sent to your device manufacturer.

DME Company

The DME company where you obtained your machine will often be the initial point of contact through which your insurer and/or healthcare provider will obtain your information.  The DME may provide your information to the insurer to secure payment for your device and/or to your physician to ensure continuity of care for your sleep disorder.

Your Healthcare Provider(s)

Your healthcare provider may monitor your PAP data to confirm your device is appropriately treating your sleep disorder and address any issues you may be having with your device.  The data will tell your provider if your pressure setting is correct, if you still have sleep-disordered breathing, if you are using your device, and if your mask fits appropriately.  This will help your provider make improvements to your treatment plan to ensure long-term optimal treatment of your sleep disorder.

Your insurance company(s)

Your insurance company may monitor your PAP adherence or compliance to evaluate if you meet the insurer’s specific compliance requirements, which may affect payment for your treatment.  For more information on this access our “PAP and Your Insurance: What you Should Know” Fact Sheet. 

Device manufacturer

According to U.S. copyright law, the manufacturer of your device owns the data created by your machine. You are legally permitted to access the data created and saved by your machine, but your manufacturer is not required to give you the means to do so; however, most major PAP manufacturers offer an online patient user portal/website where you can access (at least a portion of) your data.


Most device manufacturers have a patient website, app, or other online application where you can access general data regarding the use and effectiveness of your machine to help monitor your sleep health.  The machine itself may also display this data. It is not recommended that you “hack” your machine to access data with the intent of changing your machine setting.  The settings on your machine are set by trained sleep providers and are based on the results of your sleep study.  You should discuss any issues you are having with the PAP treatment with your sleep healthcare providers to determine if your prescription and pressure setting should be revised.   Changing your settings on your own may have negative consequences as overtreatment or undertreatment can be harmful.

What is HIPAA and