HIPAA Notice of Privacy Practices

Our commitment

Med My Way LLC is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). We are required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

How we may use and disclose your PHI

• Treatment: to evaluate your intake and labs, issue patient-specific prescriptions, and coordinate with 503A pharmacy partners, laboratories, and any clinician involved in your care.
• Payment: to bill and collect for consultations, lab panels, and dispensed medications.
• Health care operations: quality review, clinical audits, credentialing, training, and business management.
• Business associates: vendors that support the platform under written agreements requiring them to safeguard your PHI.
• As required by law: public health and safety reporting, adverse event reporting, health oversight activities, judicial or administrative proceedings, law enforcement requests, and other uses permitted or required by HIPAA.

Other uses and disclosures — including most uses of psychotherapy notes, marketing, and any sale of PHI — require your written authorization, which you may revoke at any time in writing. We never sell your PHI.

Your rights

• Inspect and obtain an electronic or paper copy of your medical record;
• Request an amendment to information you believe is incorrect or incomplete;
• Request restrictions on certain uses or disclosures of your PHI;
• Request confidential communications by an alternative means or at an alternative address;
• Receive an accounting of certain disclosures we have made;
• Obtain a paper copy of this notice on request;
• Be notified if a breach occurs that compromises the privacy or security of your PHI.

To exercise a right, email care@medmyway.org or send a request through your patient portal. We respond within the timeframes required by law.

Safeguards

We apply administrative, physical, and technical safeguards to PHI, including encrypted intake and messaging, encryption at rest, role-based access limited to your care team, automatic session timeouts on staff accounts, masking of sensitive identifiers in staff views, and audit logging of record access. Workforce members receive privacy and security training.

Complaints

If you believe your privacy rights have been violated, contact us at care@medmyway.org. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints. We will never retaliate against you for filing a complaint.

Changes to this notice

We may change this notice and apply the revised terms to all PHI we maintain. The current version is always posted on this page with its effective date.