HIPAA Authorization
Radix Health offers services, such as helping you book appointments with the healthcare provider(s) of your choice (“Your Healthcare Provider”) and notifying you of your appointment details (“Radix Services”). As part of providing the Radix Services, Radix Health may collect, use, share, and exchange your health-related information with Your Healthcare Providers. Under a federal law called the Health Insurance Portability and Accountability Act (“HIPAA”), some of this health and health-related information may be considered “protected health information” or “PHI” if such information is received from or on behalf of Your Healthcare Providers.
Safeguards for PHI
HIPAA protects the privacy and security of your PHI by limiting the uses and disclosures of PHI by most healthcare providers and by health plans (called “Covered Entities”) as well as companies, like Radix Health, that provide certain types of assistance to Covered Entities (called “Business Associates”). Under certain circumstances described in HIPAA, an individual needs to sign an Authorization form before a Covered Entity, like Your Healthcare Provider(s), can disclose protected health information to a third party.
Non-Protected Health Information
As a condition of creating your Radix Health account, you are required to read and agree to Radix Health’s Privacy Policy. Radix Health’s Privacy Policy explains how Radix Health processes and shares information received from you that is not covered by HIPAA (“Non-PHI”).
Your PHI Authorization
The purpose of this Radix Health Authorization (“Authorization”) is to request your written permission to allow Radix Health to use and disclose your PHI. If Radix Health is a Business Associate of Your Healthcare Providers, Radix Health needs your Authorization to be able to use and disclose your PHI.
Specifically, you agree that Radix Health can use your PHI to:
enable and customize your use of the Radix Health Services;
provide you alerts or other Radix Health Services regarding future appointments;
provide you with updates and information about the Radix Health Services;
conduct analysis for Your Healthcare Provider and Radix Health’s business purposes;
support development of the Radix Health Services; and
create de-identified information and then use and disclose this information in any way permitted by law, including to third parties in connection with their commercial and marketing efforts.
You also agree that Radix Health can disclose your PHI to:
third parties assisting Radix Health with any of the uses described above;
Your Healthcare Providers to enable them to refer you to, and make appointments with, other providers on your behalf, or to perform an analysis on potential health issues or treatments, provided that you choose to use the applicable Radix Health Service;
our business partners who assist us by performing core services (such as hosting, billing, fulfillment, or data storage and security) related to the operation or provision of our services, even when Radix Health is no longer working on behalf of Your Healthcare Providers;
a provider of medical services, in the event of an emergency; and
organizations that collect, aggregate and organize your information so they can make it more easily accessible to your providers.
Redisclosure
If Radix Health discloses your PHI, Radix Health will require that the person or entity receiving your PHI agrees to only use and disclose your PHI to carry out its specific business obligations to Radix Health or for the permitted purpose of the disclosure (as described above). Radix Health cannot, however, guarantee that any such person or entity to which Radix Health discloses your PHI or other information will not re-disclose it in ways that you or we did not intend or permit.
Expiration and Revocation of Authorization
Your Authorization remains in effect until you provide written notice of revocation to Radix Health.
YOU CAN CHANGE YOUR MIND AND REVOKE THIS AUTHORIZATION AT ANY TIME AND FOR ANY (OR NO) REASON.
If you wish to revoke this Authorization, you must notify Radix Health by submitting a revocation through your account settings page. Your decision not to execute this Authorization or to revoke it at any time will not affect your ability to use certain of the Radix Health Services. A Revocation of Authorization is effective after you submit it to Radix Health, but it does not have any effect on Radix Health’s prior actions taken in reliance on the Authorization before revoked.
Once Radix Health receives your Revocation of Authorization, Radix Health can only use and disclose your PHI as permitted in Radix Health’s agreements with Your Healthcare Provider(s). Your Revocation of Authorization does not affect Radix Health’s use of your Non-PHI.
We will make available to Your Healthcare Provider(s), current and past, your agreement to or revocation of this Authorization.