MEDIKEEPER PRIVACY STATEMENT
Last Updated: October 2024
Introduction
At MediKeeper, we respect and protect the privacy of the users of the portals we supply and manage on behalf of our customers. This Privacy Statement provides details of our approach to privacy and how we collect, use, and protect your personal information.
This privacy statement applies to the data collected by MediKeeper, or those working on our behalf, through information you enter, or from the imported data from authorized and approved sources. It does not apply to data collected through other non-MediKeeper approved sites, products, or services.
Collection of Your Personal Information
The Service asks you to enter an identifier/username and password to sign in. The first time you sign into the Service, the Service asks you to create an account. To create an account, you may have to provide personal information such as name, date of birth, e-mail address, and in some cases, the last four digits of your Social Security Number (SSN). These are required purely to confirm your eligibility to have access to the PORTAL by comparing them against an information file provided to us by OUR CLIENT.
We will use the e-mail address you provide when you create your account to allow you to receive notifications and messages that new information has been made available to you in the PORTAL or to advise you of some new functionality or feature that is now accessible through the PORTAL.
By default, you are the custodian of any records you create or information you enter the PORTAL. Through “Sharing and Permissions,” you may invite additional people to have access to your information. You may wish to give family members, caregivers, and your doctors access to your personal health information. You can choose if they have full access (with the ability to view and modify the information) or if they only can view the information. You will also be able to dictate which sections of the PORTAL you wish them to access and for how long they are able to access it. You will receive notifications when one of these approved persons view your data. Some of the information stored in the PORTAL may be highly sensitive, so you need to consider carefully with whom you share the information and to whom you grant access to your personal health information.
Security
Transmissions over the Internet are never 100% secure or error-free. However, we take reasonable steps to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.
Sharing Your Personal Health Information
A key function of the PORTAL is the ability to share your health information with people and services who can help you meet your health-related goals. For example, you can share your health information:
- to allow a family member or loved one to co-manage your health information,
- to consult with your health care provider or another medical professional,
- to provide information to coaches and trainers, or
- to provide information to a health advocate or health advisor.
Through “Sharing and Permissions,” you can choose to share information in the PORTAL with another person by sending a sharing invitation e-mail generated by the MediKeeper platform. If the person you invited to share your information accepts your sharing invitation, he or she will have access to your information. You can specify how long they have access and whether they can modify the information in the PORTAL.
You can also choose to grant full access to other persons, such as your spouse, for any portion of your health information contained within the PORTAL. Full access is the broadest level of access, so you should think carefully before you grant full access to your health information. Every person you grant full access to has the same capabilities as you as the user and account holder has, including accessing, modifying, deleting, and sharing all the information in the record. A person who has full access to your account can also revoke access to your account for any other person you may have granted access to the PORTAL, including you. For this reason, you should consider very carefully to whom you grant full access to your account.
How We Use Your Personal Information
We use personal information collected through the PORTAL, including health information, to provide you with an assessment of your overall health and your risk for disease. We will also include your responses in aggregated and de-identified reports provided to your employer. AT NO TIME IS YOUR EMPLOYER ABLE TO SEE YOUR INDIVIDUAL ANSWERS TO THE QUESTIONS IN THE HEALTH ASSESSMENT OR LINK THOSE ANSWERS TO YOU.
MediKeeper may access and/or disclose your personal information as required by law, in the good-faith belief that disclosure is necessary or in the interest of protecting or exercising our or others’ legal rights e.g., without limitation, in connection with requests from law enforcement officials, in connection with court proceedings or disputes, or to protect the personal safety and welfare of users of PORTAL or members of the public. Personal information collected on the PORTAL is stored and processed only in the United States of America.
How We Aggregate Information and Statistics
MediKeeper may use aggregated and de-identified information collected via the PORTAL to improve the quality of the PORTAL. This aggregated information is not associated with any individual. MediKeeper does not use your individual information obtained from the paper Health Assessment for marketing without MediKeeper first asking for and receiving your consent.
Links to Other Websites
The PORTAL may contain links to other websites. We are not responsible for the content or privacy practices of those websites, including the use of personally identifiable information about you collected by those websites. We do not intentionally transfer any personally identifiable information about you to websites that we link to, but we do require that any third-party application providers of tools contained within the PORTAL adhere to this privacy statement.
Privacy of Minors
The PORTAL is intended for use by adults in the United States. We do not intentionally or knowingly collect personally identifiable or personal health information from persons under the age of 16. We request that individuals under the age of 16 not submit any personal information to the PORTAL.
Security of Your Personal Information
MediKeeper is committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use, and disclosure. For example, we store the personal information you provide on computer servers with limited access that are in controlled facilities and the data is stored in separate encrypted locations.
Enforcement of this Privacy Statement
If you have questions regarding this statement, you should first contact your Administrator. You should immediately notify your Administrator if you feel your personal information has been tampered with, or if you feel there has been a breach of your privacy for any reason.
Changes to this Privacy Statement
We may occasionally update this privacy statement. When we do, we will also revise the “last updated” date at the top of the privacy statement. We encourage you to review this privacy statement periodically to stay informed about how we are helping to protect the personal information we collect. Your continued use of the PORTAL constitutes your agreement to this privacy statement and any updates. Please be aware that this privacy statement and any choices you make on the PORTAL do not necessarily apply to personal information that you may have provided to MediKeeper in the context of other separately operated MediKeeper products or services.
Contact Information
MediKeeper and our partners welcome your comments regarding this Privacy Statement. If you have questions about this Statement or believe that we have not adhered to it, please contact customerservice@medikeeper.com.
