# Policies
## License
BioMCP is distributed under the MIT license.
## Data sources and terms
BioMCP queries third-party APIs. Each provider may have its own terms of service, attribution requirements, and rate limits.
See [Data sources](reference/data-sources.md) for the full list and which features depend on which APIs.
## Privacy and sensitive data
- Do not send protected health information (PHI) or other sensitive patient data to third-party APIs unless you have explicit authorization and your compliance team has approved the workflow.
- Queries may be logged by upstream providers per their policies.
## Output and clinical use
BioMCP is a research and workflow aid. Validate clinically relevant information against primary sources (labels, guidelines, original publications) and your institution's policies.
