Centered Health for Women PC ("Centered Health," "we," "us," or "our") is committed to protecting your privacy and safeguarding your health information. This Privacy Policy describes how we collect, use, disclose, and protect information obtained through our patient application ("App"). This Policy supplements — and does not replace — our HIPAA Notice of Privacy Practices ("NPP").
1. Information We Collect
1.1 Protected Health Information (PHI)
As a HIPAA-covered entity, we collect and process PHI as necessary to provide you with healthcare services. This includes:
- Medical history, diagnoses, and treatment information
- Prescription and medication history
- Lab results and diagnostic reports
- Telehealth visit records and clinical notes
- Symptom logs and health tracking data you submit
- Insurance and membership information
- Appointment information
1.2 Account & Registration Data
When you register for the App, we collect your name, date of birth, email address, phone number, mailing address, and account credentials.
1.3 Usage & Technical Data
We automatically collect certain technical information when you use the App, including device identifiers, IP addresses, browser type, operating system, App usage patterns, and crash reports. This data is used to improve App performance and security.
1.4 Communications
We retain records of secure messages sent between you and your care team through the App. Please do not use the App for emergency communications.
2. How We Use Your Information
We use your information to:
- Provide, coordinate, and manage your healthcare services
- Personalize your care plan and provide personalized information to support your goals
- Schedule and conduct appointments and telehealth visits
- Process payments and manage your membership
- Send appointment reminders, care plan updates, and health-related communications
- Improve App functionality and user experience
- Comply with legal and regulatory obligations
- Conduct quality assurance and care coordination activities
3. HIPAA & Your Health Information Rights
Your PHI is governed by HIPAA and California law, including the California Confidentiality of Medical Information Act (CMIA). Under these laws, you have the right to:
- Access and obtain a copy of your medical records
- Request corrections to your health information
- Request restrictions on how we use or disclose your PHI
- Request an accounting of disclosures of your PHI
- Receive our Notice of Privacy Practices
- File a complaint with us or with the U.S. Department of Health and Human Services (HHS)
To exercise any of these rights, contact our Privacy Officer at privacy@centeredhealthforwomen.com.
4. How We Share Your Information
4.1 Treatment, Payment & Operations
We may share your PHI with other healthcare providers involved in your care, health plans, and for healthcare operations as permitted under HIPAA and described in our NPP.
4.2 Business Associates
We share PHI with third-party vendors ("Business Associates") who assist in operating the App, such as our telehealth platform, electronic health record system, and secure messaging provider. All Business Associates are contractually required to comply with HIPAA through Business Associate Agreements (BAAs).
4.3 Legal Requirements
We may disclose your information as required by law, including in response to court orders, subpoenas, or regulatory investigations.
4.4 What We Do Not Do
We do not sell your PHI or personal information to third parties. We do not use your PHI for advertising or marketing purposes without your explicit authorization.
5. Data Security
We implement administrative, technical, and physical safeguards to protect your information as required by HIPAA. These include:
- End-to-end encryption for data in transit and at rest
- Multi-factor authentication for App access
- Role-based access controls limiting PHI access to authorized personnel
- Regular security risk assessments
- Audit logging of PHI access and disclosures
While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. In the event of a breach affecting your PHI, we will notify you as required by the HIPAA Breach Notification Rule.
6. Data Retention
We retain your medical records and PHI for a minimum of seven (7) years from the date of last service, or as required by California law. Account data and usage logs are retained for the period necessary for the purposes described in this Policy, after which they are securely deleted or de-identified.
7. Cookies & Tracking Technologies
The App may use cookies and similar technologies for authentication, session management, and performance analytics. We do not use third-party advertising cookies. You may adjust your device or browser settings to limit certain tracking, though this may affect App functionality.
8. Children's Privacy
The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verified parental consent. If you believe we have inadvertently collected information from a child, please contact us immediately.
9. California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). However, PHI regulated under HIPAA and the CMIA is exempt from CCPA/CPRA. For non-PHI personal information, California residents may request:
- Disclosure of the categories and specific pieces of personal information we have collected
- Deletion of personal information (subject to exceptions)
- Correction of inaccurate personal information
- Opt-out of the sale or sharing of personal information (we do not sell personal information)
To submit a California privacy request, contact us at privacy@centeredhealthforwomen.com.
10. Third-Party Links
The App may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email at least thirty (30) days before the changes take effect. Your continued use of the App following notice of changes constitutes acceptance of the updated Policy.
12. Contact Our Privacy Officer
For questions, concerns, or to exercise your privacy rights, please contact:
Privacy Officer — Centered Health for Women PC
Email: hello@centeredhealthforwomen.com
Website: centeredhealthforwomen.com
You also have the right to file a complaint with the U.S. Department of Health and Human Services at www.hhs.gov/ocr/privacy.