HIPAA Notice

1. Our role under HIPAA

When LIFE OS handles protected health information on behalf of a clinician, clinic, health plan, or other covered entity, it acts as a business associate under the Health Insurance Portability and Accountability Act. In that role we are bound by a written business associate agreement with that covered entity and by the HIPAA Privacy, Security, and Breach Notification Rules that apply to business associates.

Some information you enter into LIFE OS on your own, outside a treatment relationship, may not be protected health information under HIPAA. That information is still protected by our Privacy Policy and by applicable state consumer health data laws, and we apply the same safeguards to it either way.

2. What protected health information means

Protected health information is individually identifiable information relating to your past, present, or future physical or mental health, the care you receive, or payment for that care. On LIFE OS this can include laboratory results, medications and prescriptions, conditions and history, clinician notes shared with you, and device derived measurements when they are tied to your identity in a treatment context.

3. How we may use and disclose it

• Treatment. To make your record available to clinicians involved in your care, at your direction or at the direction of the covered entity we serve.
• Payment. To process orders, claims, and billing for services you receive.
• Health care operations. To support quality review, care coordination, and the administrative functions of the covered entities we serve.
• Business associates and subcontractors. To vendors that process information on our behalf under written agreements imposing the same obligations.
• As required by law. Including public health reporting, health oversight, judicial process, and law enforcement requests we are legally obligated to answer.
• Research. Only with your written authorization, or in a de-identified form, or as permitted by an Institutional Review Board under the conditions HIPAA allows.

Uses and disclosures not described here, including any marketing use or any sale of protected health information, require your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted on it.

4. Your rights

• Inspect and copy. Request a copy of your health information, including in an electronic format.
• Amend. Ask to correct information you believe is inaccurate or incomplete.
• Accounting of disclosures. Request a list of certain disclosures we have made.
• Request restrictions. Ask us to limit how your information is used or disclosed.
• Confidential communications. Ask to be contacted in a specific way or at a specific address.
• Breach notification. Be notified if a breach compromises the privacy or security of your information.
• Paper copy. Request a paper copy of this Notice at any time.

Because LIFE OS acts as a business associate, some requests are directed to the covered entity that holds the record. Where that is the case we will tell you promptly and route your request. Submit a request through the contact page.

5. Our duties

We are required by law to maintain the privacy and security of protected health information, to notify affected individuals following a breach, to follow the terms of the Notice currently in effect, and to abide by our business associate agreements. We reserve the right to change this Notice and to apply the revised Notice to information we already hold. The current version is always posted on this page.

6. Safeguards

We maintain administrative, physical, and technical safeguards including encryption in transit and at rest, role scoped access control, logging of administrative access, and vendor review. Full detail is on the compliance page.

7. Complaints

If you believe your privacy rights have been violated, contact us through the contact page. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.