Myndaro Health Notice of Privacy Practices and Privacy Policy
 
THIS NOTICE DESCRIBES HOW INFORMATION YOU PROVIDE TO MYNDARO MAY BE USED AND DISCLOSED AND HOW YOU CAN
GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Myndaro is committed to keeping your health information safe. To help you understand your rights
to your health information, please review this policy. We are required by law to have this privacy policy and maintain your health information in a manner consistent with this policy and law. This notice is in five parts to describe our privacy practices. We hope through this policy that we answer any questions you have about how Myndaro maintains your health
information. The sections are as follows:
1) What is Protected Health Information (“PHI”)?
2) What PHI does Myndaro collect?
3) Who does Myndaro share my PHI with and why?
4) What are my rights to my PHI?
5) What should I do if I have a question or concern about my collected PHI?
What is Protected Health Information?
As many health care service providers, Myndaro receives and maintains certain personal information about all our members.
Some of this personal information is protected by federal and state laws. This type of information is known as “protected health information” or “PHI”. PHI is health information that identifies or could be used to identify a specific person.
What PHI does Myndaro collect?
When you voluntarily give your PHI to Myndaro through our online website and through your use of our Myndaro programs
we maintain such PHI in our secure systems. Examples of PHI you may provide to Myndaro include:
• When you choose to register for the Myndaro programs, you provide your personal information such as your name, address, height, weight, medical history, and/or insurance information.
• When you use the Myndaro programs, we will receive health information from you such as your blood glucose readings, blood pressure values, A1C values, and/or insulin intake units.
• We may also collect your prescription, lab and claims data from available information sources to provide a more personal experience in the Myndaro programs.
Who does Myndaro share my PHI with and why?
We use or disclose your PHI for treatment, payment, or healthcare operations purposes and other purposes permitted or required by law. By registering for the Myndaro program, you authorize Myndaro to use or disclose your PHI for such purposes, which are described below. We need your written authorization to use or disclose your health information for any purpose not covered by one of the categories below. We will not use or disclose your PHI for marketing purposes or sell your PHI, unless you have agreed to this use or disclosure.
• Healthcare Operations - We may use or disclose your PHI for activities necessary to support our healthcare operations, such as performing quality checks on our services, internal audits, arranging for legal services, data analysis or developing reference ranges for our services.
• Research - We may also use and disclose PHI for research purposes when an Institutional Review Board or privacy board has reviewed the research proposal and established protocols to ensure the privacy of your PHI and determined that the researcher does not need to obtain your authorization prior to using your PHI for research purposes.
• As Required by Law - We may use or disclose your PHI as required by law.
• Law Enforcement Activities, Legal Proceedings and Court Orders - We may use and disclose your PHI to prevent or minimize a serious threat to your health and safety or that of another person. We may also provide PHI to law enforcement officials, for example, in response to a warrant, investigative demand or similar legal process, or for officials to identify or locate a suspect, fugitive, material witness, or missing person. We may also disclose PHI to appropriate agencies if we reasonably believe an individual to be a victim of abuse, neglect or domestic violence.
We may disclose your PHI if required to do so with a court or administrative order. We may disclose your PHI in response to a subpoena, discovery request or other legal process during a judicial or administrative proceeding. We may also disclose PHI to those assisting in disaster relief efforts so that others can be notified about your condition, status and location.
• Family and Friends: At your request, we may disclose PHI to a family member, friend, or anyone else you inform us
to provide the information to.
• Other Uses and Disclosures: As permitted by HIPAA, we may disclose your PHI to:
• Public Health Authorities
• The Food and Drug Administration
• Health Oversight Agencies
• Military Command Authorities
• National Security and Intelligence Organizations
• Correctional Institutions
• Organ and Tissue Donation Organizations
• Coroners, Medical Examiners and Funeral Directors
• Workers Compensation Agents
What are my rights to my PHI?
You have rights to your PHI that we collect. You can request Myndaro restrict the use and disclosure of your PHI by sending written request to the address below.
You can access your PHI we created or PHI you provided us online at any time by logging in at Myndaro.com or you can request we send your health information by alternative means to an alternative address. Once you review your PHI, if you see any problems with your PHI, you may request amendments to your PHI by making a written request to us at the address below. We may deny the request in some cases. If we deny your request to change your PHI we will provide you with a written explanation of the reason for the denial and additional information regarding further actions that you may take.
You also have the right to receive a list of certain disclosures of your PHI made by us in the past six years from the date of your written request to us at the address below. Under the law, this does not include disclosures made for purposes of treatment, payment, or healthcare operations or the other certain other purposes we have stated above. Please be aware that we are required as stated in the Health Insurance Portability and Accountability Act (HIPAA) of 1996 to notify you in the event of a breach involving your PHI and will do so as required by law.
You have the right to obtain a paper copy of this Privacy Policy by written request.
What should I do if I have a question or concern about my collected PHI?
If you believe your privacy rights have been violated, you have the right to file a complaint with us. You also have the right to file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against any individual for filing a complaint.
To file a complaint with us, or should you have any questions about this Privacy Policy and Notice of Privacy Practices, send an email to our Senior Security Official and Senior Privacy Official at [email protected].
Note: We reserve the right to amend the terms of this Privacy Policy and Notice of Privacy Practices to reflect changes in our privacy practices, and to make the new terms and practices applicable to all PHI that we maintain about you, including PHI created or received prior to the effective date of the Privacy Policy and Notice of Privacy Practices revision. Our Privacy Policy and Notice of Privacy Practices is displayed on our website and a copy is available upon request.