Notice of Privacy Practices

Your Privacy Rights

MyHealthAlly is a HIPAA-covered entity. This Notice describes how we may use and disclose your protected health information (PHI) and how you can access this information. Please review it carefully.

Information We Collect

• Name, date of birth, contact information
• Symptoms, health history, and responses to intake forms
• Telehealth visit records and notes
• Prescription and medication information (when provided)
• Device and wearable data you choose to connect
• Billing and insurance information

How We Use Your Information

We may use and disclose your PHI for the following purposes:

• Treatment: To coordinate your care with your primary care provider
• Payment: To process billing and insurance claims
• Operations: To improve our services, conduct quality assessments, and for training
• Legal requirements: As required by law (public health reporting, court orders)

We will not sell your PHI. We will not use your PHI for marketing without your separate written authorization.

AI and Automated Processing

MyHealthAlly uses artificial intelligence (AI) to support your care. Specifically, AI may:

• Analyze symptom check responses to generate advisory summaries for your provider
• Translate medical content into your preferred language
• Assist in summarizing your health intake information

Important: AI outputs are advisory only and do not constitute medical diagnosis or clinical decisions. All clinical decisions are made by your licensed provider.

AI processing of your PHI is conducted under Business Associate Agreements (BAAs) with our AI technology providers. Your data is used only to provide services to you — it is never used to train external AI models without your explicit consent.

Telehealth Services

Video visits conducted through MyHealthAlly are subject to applicable telehealth consent laws. Session content is not recorded without your explicit consent. Telehealth providers are licensed in the jurisdiction where you receive care.

Your Rights

• Access: You have the right to inspect and receive a copy of your PHI.
• Amendment: You may request corrections to your PHI.
• Accounting of Disclosures: You may request a list of disclosures of your PHI.
• Restrictions: You may request restrictions on how we use or disclose your PHI.
• Confidential Communications: You may request alternative methods of communication.
• Data Portability: You may request an export of your health data in standard format.
• Deletion: You may request deletion of your account and associated PHI, subject to legal retention requirements.

Data Security

MyHealthAlly uses industry-standard security measures to protect your PHI, including: encryption at rest and in transit, access controls, audit logging of all data access, and regular security assessments.

Contact Our Privacy Officer

To exercise your rights or to report a privacy concern, contact us at:

Complaints

You have the right to file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint.

HHS OCR Complaint Portal →

Changes to This Notice

We may update this Notice at any time. The updated version will be posted at this URL with the new effective date. We will notify you of material changes via email.