Notice of Privacy Practices
How your medical information may be used and disclosed under HIPAA, and your rights.
Draft for legal review. This text isn't final and isn't in effect yet. The published version will replace it before Hoss opens to patients.
Your rights
When it comes to your health information, you have certain rights. You can:
- Get a copy of your medical record, electronic or paper. We'll usually provide it within 30 days, and may charge a reasonable, cost-based fee.
- Ask us to correct your record if you think it's incorrect or incomplete. We may say no, but we'll tell you why in writing within 60 days.
- Request confidential communications, for example asking us to contact you at a different email or address. We'll say yes to all reasonable requests.
- Ask us to limit what we use or share. We aren't required to agree, except that if you pay for a service in full out of pocket, you can ask us not to share it with your health insurer.
- Get a list of those we've shared information with for six years before the date you ask, with some exceptions.
- Get a copy of this notice at any time, including a paper copy.
- Choose someone to act for you, such as a medical power of attorney or legal guardian.
- File a complaint if you feel your rights have been violated (see "Complaints" below).
Your choices
For some health information, you can tell us your choices about what we share, such as sharing with family or close friends involved in your care. In these cases we never share your information unless you give us written permission:
- marketing purposes;
- sale of your information;
- most sharing of psychotherapy notes.
How we use and share your information
- To treat you: for example, your clinician reviews your check-in summary before your video visit, or sends a prescription to your pharmacy.
- To run our organization: for example, to improve quality of care, train staff and keep records.
- To bill for your services, including payment processors and, when used, your health plan.
- With business associates, who help us provide care under contracts that protect your information, such as hosting, video and AI services.
Other ways we may share
We may share your information when the law allows or requires it:
- for public health and safety, such as reporting certain diseases or preventing a serious threat;
- for research, with privacy protections;
- to comply with the law, including the Department of Health and Human Services;
- for organ donation requests, and with medical examiners or funeral directors;
- for workers' compensation, law enforcement, and other government requests;
- in response to lawsuits and legal actions.
Our responsibilities
- We're required by law to maintain the privacy and security of your protected health information.
- We'll tell you promptly if a breach occurs that may have compromised the privacy or security of your information.
- We must follow the duties and privacy practices described in this notice and give you a copy of it.
- We won't use or share your information other than as described here unless you tell us we can in writing. You can change your mind at any time by telling us in writing.
Changes to this notice
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request, in the app and on our website.
Complaints
If you believe your privacy rights have been violated, contact our privacy officer at [email protected]. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/complaints, by calling 1-877-696-6775, or by writing to 200 Independence Avenue S.W., Washington, D.C. 20201. We won't retaliate against you for filing a complaint.
Contact
Privacy officer, Hoss Care, Inc., [mailing address to be confirmed]. Email [email protected].