Privacy Policy
Effective Date: January 1, 2025
Last Updated: December 30, 2024
About This Policy
Data Integrities, Inc. (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard information when you use our “My Health” mobile application and related services.
Important Healthcare Notice
Development Status: The My Health app is currently in active development. During this development phase, all health data displayed is simulated for demonstration purposes only. No real patient health information is collected, stored, or transmitted.
Future Implementation: Upon commercial release, this app will connect to Epic health systems and will be fully HIPAA and SOC 2 compliant. We will update this policy before any real health data processing begins.
Information We Collect
During Development Phase
- App Usage Data: Basic analytics about how you interact with the app
- Device Information: Device type, operating system, and app version
- Crash Reports: Technical data to help improve app stability
- Authentication Data: Secure tokens for app access (no personal health data)
Future Production Phase
When the app connects to real health systems:
- Health Information: Medical records, lab results, appointments, and other health data as authorized by you
- Provider Information: Healthcare provider details and facility information
- Communication Data: Messages and interactions within the healthcare system
How We Use Information
Current Development Use
- Improve app functionality and user experience
- Debug technical issues and crashes
- Analyze usage patterns to enhance features
- Provide customer support
Future Healthcare Use
- Display your health information from Epic systems
- Facilitate communication with healthcare providers
- Schedule appointments and manage healthcare services
- Provide enhanced healthcare management features
Data Security
We implement industry-standard security measures:
- Encryption: All data transmissions are encrypted using SSL/TLS protocols
- Authentication: Secure OAuth 2.0 authentication for all system access
- Access Controls: Strict access limitations based on user roles and permissions
- Infrastructure: Secure cloud hosting with regular security audits
HIPAA Compliance: Upon production release, all health data handling will be fully HIPAA compliant, including:
- Business Associate Agreements with healthcare providers
- Audit logging of all health data access
- Data encryption at rest and in transit
- Regular compliance assessments
Data Sharing
Current Practice: We do not sell, trade, or otherwise transfer your information to third parties.
Healthcare Providers: In production, health data will be shared only with authorized healthcare providers within your Epic health system as you direct.
Service Providers: We may share limited data with trusted service providers who assist in app operation (analytics, crash reporting, hosting), all under strict confidentiality agreements.
Legal Requirements: We may disclose information when required by law or to protect rights, property, or safety.
Your Rights
You have the right to:
- Access: Request information about data we have collected
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your data (subject to legal requirements)
- Portability: Request transfer of your data to another service
- Opt-out: Discontinue use of the app at any time
Healthcare Rights: Upon production release, you will have additional rights under HIPAA, including the right to an accounting of disclosures and the right to request restrictions on use of your health information.
Cookies and Tracking
Our app may use:
- Analytics Cookies: To understand app usage and improve functionality
- Authentication Tokens: To maintain secure login sessions
- Crash Reporting: To identify and fix technical issues
You can control these through your device settings.
Children’s Privacy
Our app is not designed for children under 13. We do not knowingly collect information from children under 13 without parental consent.
International Users
Our services are based in the United States. If you access our app from outside the US, your information may be transferred to and processed in the United States.
Changes to This Policy
We may update this Privacy Policy as our app evolves, particularly when we begin processing real health data. We will:
- Post updates on our website at dataintegrities.com
- Notify users of significant changes through the app
- Provide at least 30 days notice before any material changes take effect
Contact Information
Data Integrities, Inc.
15750 Spectrum Drive, Unit 2418
Addison, TX 75001
United States
Email: privacy@dataintegrities.com
Website: https://www.dataintegrities.com/contact/
For healthcare-related privacy concerns or to exercise your rights regarding health information, please contact us using the information above.
Compliance Certifications
Current: SOC 2 Type II in progress
Planned: HIPAA compliance certification upon production release
Security: Regular third-party security assessments and penetration testing
This Privacy Policy is designed to comply with applicable privacy laws including CCPA, GDPR, and HIPAA (upon production release). If you have questions about this policy or our privacy practices, please contact us.