Notice of Privacy Practices

1. Who We Are

Medication Call Reminder is a healthcare application that provides voice-based medication adherence services, including scheduled reminder calls, SMS alerts, and caregiver notification systems. We handle Protected Health Information as a Business Associate when providing services to covered healthcare providers, and directly for individuals using our consumer service.

2. Protected Health Information We Collect

We collect and maintain the following categories of PHI to provide our medication reminder services:

• Identifiers: Name, email address, phone number
• Medication information: Medication names, dosages, schedules, and adherence records
• Confirmation records: Call confirmation logs, missed call records, timestamps
• Caregiver information: Names and contact information of designated family members or caregivers
• Voice recordings: Family member voice recordings used to personalize reminder calls
• Communication logs: Records of SMS messages and voice call delivery

3. How We May Use and Disclose Your PHI

3.1 Treatment, Payment, and Healthcare Operations

We may use and disclose your PHI for treatment (delivering reminders and coordinating with your care team), payment (processing subscription fees), and healthcare operations (quality improvement, compliance, and staff training) without your written authorization.

3.2 Other Permitted Uses Without Your Authorization

• As required by law: Federal, state, or local legal requirements
• Public health activities: Disease prevention and control authorized by law
• Health oversight: Government audits, investigations, or oversight activities
• Judicial proceedings: Court orders, subpoenas, or other lawful process
• Law enforcement: Specific circumstances permitted by HIPAA
• Serious threats: Prevention of imminent threat to health or safety
• Business associates: Vendors who assist us under signed Business Associate Agreements

3.3 Uses Requiring Your Written Authorization

We will obtain your written authorization before using your PHI for marketing, selling your PHI to any third party, or any purpose not described in this Notice. You may revoke any authorization at any time by contacting our Privacy Officer in writing.

4. Your Rights Regarding Your PHI

Right to Access

You may request a copy of your PHI. Submit requests in writing to our Privacy Officer. We will respond within 30 days and may charge a reasonable cost-based fee for copies.

Right to Request Amendments

If you believe your PHI is incorrect or incomplete, you may request an amendment in writing. We will respond in writing and explain any denial.

Right to an Accounting of Disclosures

You may request a list of disclosures we have made of your PHI in the six years prior to your request, excluding disclosures for treatment, payment, and healthcare operations.

Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI. We must agree to restrict disclosure to a health plan when you have paid for a service out of pocket in full.

Right to Confidential Communications

You may request that we communicate with you at a specific phone number or email address. We will accommodate reasonable requests.

Right to a Paper Copy

You have the right to a paper copy of this Notice at any time. Use the Print button above or contact our Privacy Officer.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

5. Our Duties

• Maintain the privacy of your PHI
• Provide you with this Notice of our legal duties and privacy practices
• Abide by the terms of this Notice currently in effect
• Notify you in the event of a breach of your unsecured PHI

6. Breach Notification

In the event of a breach of your unsecured PHI, we will notify you without unreasonable delay and no later than 60 calendar days after discovery. Notification will include: a description of the breach, the types of PHI involved, steps you should take to protect yourself, what we are doing to investigate and mitigate harm, and contact information for questions.

If a breach affects 500 or more individuals, we will also notify prominent media outlets and the HHS Secretary.

7. How We Protect Your PHI

• AES-256 encryption for all PHI stored in our systems
• Encrypted transmission (TLS) for all PHI in transit
• Role-based access controls limiting PHI access to authorized personnel only
• Regular security risk assessments and vulnerability testing
• Workforce training on HIPAA privacy and security requirements
• Business Associate Agreements with all vendors who access PHI on our behalf
• Incident response and breach notification procedures

8. Changes to This Notice

We reserve the right to change the terms of this Notice at any time. Changes will apply to PHI we already hold as well as PHI we receive in the future. We will post the revised Notice on this page and update the effective date. We will notify you by email of any material changes.

9. Contact Us