Privacy Policy

1. Introduction

Acute Health Directory is committed to protecting your privacy and maintaining the security of your personal and protected health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Handling of protected health information is subject to applicable law and the business associate agreement where required.

2. Information We Collect

We collect:

• Account information (name, email, credentials)
• Request information (patient demographics, authorization)
• Usage information (device, IP address, activity logs)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process and fulfill document retrieval requests
• Verify identity and authorize access to PHI
• Detect and prevent fraud, security threats
• Comply with legal obligations and regulations

4. Data Security

Account protections include:

• Multi-factor authentication for user accounts
• Access controls and role-based permissions
• Activity records for supported account and request actions

Deployment controls, retention periods and subprocessors must be confirmed before this draft is adopted. This notice does not represent a security certification.

5. Your Rights

You have the right to:

• Access and review your personal information
• Request corrections to inaccurate information
• Request deletion of your account
• File a complaint with us or the Office for Civil Rights

6. Contact Us

For questions about this Privacy Policy, contact: [email protected]

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at 1-877-696-6775 or visit www.hhs.gov/ocr