Privacy Policy

1. Who we are

Med My Way LLC (“Med My Way,” “we,” “us”) operates a physician-led telehealth platform. This policy explains what information we collect through medmyway.org and our patient portal, how we use it, and the choices you have. Health information created or received in the course of your care is also governed by our HIPAA Notice of Privacy Practices, which controls if the two documents conflict.

2. Information we collect

• Identity and contact data: name, date of birth, email, phone, shipping address, and government-issued identification used to verify who you are before a prescription is issued.
• Health information: intake responses, medical and medication history, allergies, symptoms, lab results and uploaded documents, clinical notes, prescriptions, and messages with your care team.
• Transaction data: consultation and lab panel orders, invoice status, and payment confirmations. Full payment card numbers are never collected or stored on our systems.
• Technical data: IP address, device and browser information, and security or audit logs generated when you use the portal.

3. How we use information

We use your information to provide and coordinate clinical care, verify identity and eligibility, transmit patient-specific prescriptions to licensed 503A pharmacy partners, arrange lab work and shipping, process payment for services, communicate with you, secure the platform and detect abuse, and meet legal, licensing, and recordkeeping obligations. We do not use protected health information for advertising, and we do not sell personal information.

4. When we share information

We share information only as needed to deliver care or as required by law, including with:

• Licensed clinicians and clinical staff involved in your care;
• State-licensed 503A compounding pharmacy partners fulfilling your prescription;
• Clinical laboratories and phlebotomy partners performing ordered testing;
• Service providers acting on our behalf under written agreements — hosting and database infrastructure, secure email delivery, and payment processing;
• Government agencies, regulators, or courts where disclosure is legally required, and to protect against serious threats to health or safety.

Vendors that handle protected health information do so under Business Associate Agreements and may use it only to perform services for us.

5. How we protect information

Data is transmitted over encrypted connections and stored with encryption at rest, role-based access controls, row-level database authorization, session timeouts on staff accounts, and audit logging of access to patient records. Access is limited to workforce members who need it for your care. No system can be guaranteed perfectly secure, so we also maintain procedures for investigating and notifying you of incidents where required by law.

6. Retention

Medical records are retained for the period required by applicable state law and professional recordkeeping standards, and longer where necessary to resolve disputes or meet legal obligations. Account and transaction records are retained for as long as your account is active plus any required retention period.

7. Your choices and rights

You may request access to, a copy of, or correction of your information, ask us to restrict certain uses, update your communication preferences, or request deletion of information we are not required to retain. Health-record rights are described in detail in our HIPAA Notice. Depending on your state of residence, you may have additional rights regarding personal information; we honor verified requests without discriminating against you for making them.

8. Cookies and analytics

We use strictly necessary cookies and local browser storage to keep you signed in and to hold an in-progress intake draft within your browser tab. We do not use advertising cookies or share browsing activity with advertising networks.

9. Children

Our services are intended for adults 18 and older. We do not knowingly collect information from children. If you believe a minor has provided information, contact us and we will delete it.

10. Changes to this policy

We may update this policy as our services or legal obligations change. Material changes will be reflected by a new effective date on this page.

11. Contact us

Privacy questions, requests, or complaints: care@medmyway.org. Please do not include detailed clinical information in email — use your patient portal for anything sensitive.