HIPAA Notice of Privacy Practices

1. Who follows this notice

This notice applies to the independently licensed clinicians and professional medical practices that provide care to you through the HealifyMD platform ("Providers"), and to HealifyMD when it handles your health information on their behalf as a business associate. Together we refer to these as "we" or "us" in this notice.

We are required by law to maintain the privacy of your protected health information ("health information"), to give you this notice of our legal duties and privacy practices, to notify you if a breach affects your unsecured health information and to follow the terms of the notice currently in effect.

The law allows us to use and share your health information for the purposes below. Each category includes examples; not every use is listed.

Treatment: to provide, coordinate and manage your care, for example sharing your intake with the clinician treating you, sending a prescription to a pharmacy or ordering tests from a laboratory.
Payment: to bill and collect payment for services, for example confirming a charge with a payment processor.
Health care operations: to run our services and improve quality, for example reviewing care for quality, training staff, conducting audits and managing our business.
Business associates: to companies that perform services for us, such as hosting, communications or customer support, under written agreements requiring them to protect your information.
Reminders and information: to contact you about appointments, refills, test results, and treatment alternatives or health-related services that may interest you.

3. Other uses and disclosures permitted or required by law

As required by federal, state or local law.
Public health activities, such as reporting certain diseases, adverse reactions to medications or product problems to the FDA.
Reporting suspected abuse, neglect or domestic violence to authorities as required or permitted by law.
Health oversight activities, such as audits, investigations, inspections and licensure actions.
Lawsuits and legal proceedings, in response to a court or administrative order, or a subpoena or other lawful process.
Law enforcement purposes, in limited circumstances allowed by law.
Coroners, medical examiners and funeral directors, as allowed by law.
Organ and tissue donation organizations, as allowed by law.
Research, when approved through a process that protects your privacy, or with your authorization.
To prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
Specialized government functions, such as military, national security or protective services, as allowed by law.
Workers' compensation programs, as allowed by law.

4. Uses that require your written authorization

We will not use or share your health information for the following without your written authorization: most uses and disclosures of psychotherapy notes, uses and disclosures for marketing purposes, and sales of health information. Other uses and disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

5. Your choices

For certain information, you can tell us your choices about what we share. If you have a clear preference, tell us and we will follow your instructions where we can. You have the right and choice to tell us whether to share information with family members, close friends or others involved in your care or payment for your care. If you are unable to tell us your preference, for example if you are unconscious, we may share information if we believe it is in your best interest.

6. Your rights

Right to access: you can ask to see or get a copy of your health information, including an electronic copy. We will usually respond within 30 days and may charge a reasonable, cost-based fee.
Right to amend: you can ask us to correct health information you believe is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days.
Right to request confidential communications: you can ask us to contact you in a specific way, such as by a particular email address, or to send mail to a different address. We will agree to reasonable requests.
Right to request restrictions: you can ask us not to use or share certain information for treatment, payment or operations. We are not required to agree, except that if you pay for a service in full out of pocket, you can ask us not to share information about that service with your health insurer, and we will agree unless the law requires otherwise.
Right to an accounting of disclosures: you can ask for a list of the times we shared your health information in the six years before your request, who we shared it with and why, excluding disclosures for treatment, payment and operations and certain others. One accounting a year is free.
Right to a copy of this notice: you can ask for a paper or electronic copy at any time.
Right to choose someone to act for you: if you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights. We will verify their authority first.
Right to be notified of a breach: we will notify you if a breach occurs that may have compromised the privacy or security of your information.

7. More protective state laws

Some state laws give your health information more protection than federal law, for example for certain mental health, HIV, genetic or reproductive health information. Where a state law is more protective, we follow it.

8. How we protect your information

We use administrative, technical and physical safeguards designed to protect your health information, limit access to people who need it to do their jobs and require our business associates to do the same. Electronic communication carries some risk; use secure in-platform messaging for clinical details rather than regular email when possible.

9. How to exercise your rights

To make a request described in this notice, email support@healifymd.com with "Privacy Request" in the subject line, describing what you are asking for. We may ask you to complete a form and to verify your identity before acting on your request.

10. Complaints

If you believe your privacy rights have been violated, you can file a complaint with us by emailing support@healifymd.com with "Privacy Complaint" in the subject line. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

11. Changes to this notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on our website and on request, and its effective date will be shown at the top.

Questions about this page? Email support@healifymd.com.

Notice of Privacy Practices