HIPAA Privacy Policy

Treatment

We may use and disclose your PHI to provide, coordinate, and manage your healthcare and related services. This includes sharing information with independent healthcare providers who are treating you through our Platform, licensed pharmacies dispensing your prescriptions, and other healthcare professionals involved in your care.

Payment

We may use and disclose your PHI to obtain payment for healthcare services rendered to you. This includes billing, claims processing, and payment collection activities carried out by us, healthcare providers, or their billing agents.

Healthcare Operations

We may use and disclose your PHI for healthcare operations, including:

• Quality assessment and improvement activities
• Reviewing provider qualifications and performance
• Training programs for healthcare professionals
• Accreditation, licensing, and credentialing activities
• Business planning and management
• Customer service and compliance activities

As Required by Law

We may disclose your PHI when required to do so by federal, state, or local law, including to comply with court orders, subpoenas, or other legal processes.

Public Health Activities

We may disclose PHI to public health authorities authorized to receive reports of disease, injury, birth, death, or child abuse, and for other legally authorized public health purposes.

Health Oversight Activities

We may disclose PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure, as necessary for the government to monitor the healthcare system.

Law Enforcement

We may disclose PHI to law enforcement officials for law enforcement purposes as required by law or in response to a court order, subpoena, warrant, or similar legal process.

Serious Threats to Health or Safety

We may disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, and the disclosure is to a person reasonably able to prevent or lessen the threat.

Business Associates

We may share PHI with our business associates — entities that perform services on our behalf — provided they have agreed in writing to safeguard PHI in accordance with HIPAA requirements. Business associates may include technology vendors, billing companies, and other service providers.

Right to Access and Inspect Your PHI

You have the right to inspect and receive a copy of your PHI that we maintain in a designated record set, such as your medical records. We may charge a reasonable, cost-based fee for providing a copy. We may deny access in limited circumstances as permitted by law.

Right to Request an Amendment

You have the right to request that we amend your PHI if you believe it is inaccurate or incomplete. We may deny your request in certain circumstances, including if we determine the PHI is accurate and complete.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI during the six years prior to the date of your request. This right does not apply to disclosures made for treatment, payment, or healthcare operations, or disclosures you authorized.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your requested restriction except in certain circumstances required by law.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your PHI in a particular way or at a particular location (for example, by mail to a specified address). We will accommodate reasonable requests.

Right to a Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically.