HealthPass Privacy Policy
HealthPass by Legacy Health Network ("HealthPass," "we," "our," or "us") provides a membership administration and provider coordination platform for members, participating clinics, and authorized administrators. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the HealthPass mobile app, web app, member portal, administrative services, and related websites that link to this policy.
HealthPass is not health insurance and does not itself provide medical diagnosis, treatment, or emergency services. Participating clinics and providers are responsible for the healthcare services they provide. If you have a medical emergency, call 911 or seek emergency care immediately.
Information We Collect
Depending on how you use HealthPass, we may collect:
- Account information, such as name, email address, phone number, login credentials, and communication preferences.
- Membership and enrollment information, such as selected membership plan, selected home clinic, covered services, family or covered-member details, agreement acknowledgments, electronic signature records, and membership status.
- Contact and profile information, such as mailing address, date of birth, relationship to covered members, and other information you provide during enrollment or support interactions.
- Payment and billing information, such as payment status, subscription records, transaction identifiers, billing history, and payment method metadata. Payment card or bank details may be collected and processed by our payment processor rather than stored directly by HealthPass.
- Appointment and provider coordination information, such as appointment requests, selected clinic or provider, visit status, service category, and related scheduling details.
- Health-related information that you or participating providers provide through the platform, which may include protected health information as defined by HIPAA when applicable.
- Device and usage information, such as device type, app version, operating system, IP address, browser type, log data, crash reports, diagnostics, security events, and feature usage.
- Notification information, such as push notification tokens, notification preferences, delivery status, and generic appointment, account, or payment notification metadata.
How We Use Information
We use information to:
- Create, authenticate, secure, and manage user accounts.
- Administer HealthPass memberships, billing, renewals, clinic assignment, and member support.
- Coordinate appointment requests and related communications with participating clinics and providers.
- Process payments, reconcile billing activity, prevent fraud, and maintain financial records.
- Send transactional communications, including account, membership, appointment, payment, and support messages.
- Send push notifications when you enable them. Notification content is designed to avoid unnecessary protected health information.
- Maintain, troubleshoot, secure, and improve the HealthPass platform.
- Comply with legal, regulatory, contractual, accounting, audit, and safety obligations.
- Create aggregated or de-identified information for quality improvement, operational analysis, network analysis, and service improvement.
Protected Health Information And HIPAA
HealthPass and participating providers are committed to protecting protected health information in accordance with HIPAA, HITECH, and other applicable privacy and data protection laws when those laws apply. We use and disclose protected health information only as permitted by law, authorized by you, or needed to operate HealthPass services. This Privacy Policy does not replace any Notice of Privacy Practices provided by a participating healthcare provider.
How We Share Information
We may share information with:
- Participating clinics, providers, and their authorized personnel to coordinate membership services, appointments, and care-related administration.
- Payment processors and financial service providers to process payments, subscriptions, refunds, chargebacks, and billing events.
- Technology vendors, hosting providers, analytics, error monitoring, notification, email, SMS, and customer support providers that help us operate the platform.
- Professional advisers, auditors, insurers, and legal or compliance personnel.
- Government, regulatory, law enforcement, or other parties when required by law, legal process, safety obligations, or to protect rights and prevent fraud or abuse.
- Successors or assignees in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.
We do not sell protected health information. We do not use protected health information for targeted advertising.
Payment Processing
HealthPass may use third-party payment processors to collect and process membership payments. These processors may collect payment card, bank, or transaction information directly from you. Their handling of payment information is governed by their own security and privacy practices. We receive transaction metadata needed to manage memberships, billing, and support.
Cookies, Analytics, And Diagnostics
We may use cookies, local storage, log files, analytics, and diagnostic tools to keep users signed in, secure the service, remember preferences, understand app performance, detect errors, and improve HealthPass. You can adjust browser settings to limit certain cookies, but some features may not work correctly without them.
Data Retention
We retain information for as long as reasonably necessary to provide the service, maintain accounts and memberships, comply with legal, regulatory, tax, accounting, audit, and healthcare obligations, resolve disputes, enforce agreements, and maintain security. Retention periods vary based on the type of information and applicable legal requirements.
Your Choices And Rights
You may contact us to request access to, correction of, or deletion of certain personal information, subject to identity verification and legal, healthcare, billing, security, and recordkeeping limits. You may also update some account details in the HealthPass member portal and may disable push notifications through your device settings.
Some health records, billing records, security logs, and legally required records may need to be retained even after an account is closed.
Children
HealthPass is intended for use by adults managing their own membership or authorized family/covered-member access. It is not directed to children under 13. If we learn that we collected personal information from a child without appropriate authorization, we will take appropriate steps to delete or restrict that information.
Security
We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
International Users
HealthPass is operated from the United States and is intended for users in the United States. If you access HealthPass from another location, your information may be processed in the United States, where privacy laws may differ from those in your location.
Changes To This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and provide notice as required by law or through the HealthPass app, website, or other appropriate channels.
Contact Us
For privacy questions, requests, or concerns, contact HealthPass by Legacy Health Network at:
Email: support@healthpassbylegacy.com
Website: https://member.healthpassbylegacy.com