PREVHEALTH PRIVACY POLICY

PrevHealth ("PrevHealth," "we," "us," or "our") is committed to protecting the privacy and security of the individuals we serve. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information and health information in connection with our website, in-person medical services, telehealth services, patient communications, AI-assisted documentation systems, and payment processing activities.

PrevHealth is a United States healthcare provider with its parent entity registered in Pennsylvania and clinical operations in Pennsylvania, Virginia, and other U.S. states in accordance with state licensing requirements.

Our Notice of Privacy Practices. Health information that we create or receive in providing your care is "Protected Health Information" ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Our Notice of Privacy Practices describes how we use and disclose PHI and explains your rights. It is available on our website and at each of our offices. If this Privacy Policy and our Notice of Privacy Practices differ regarding PHI, the Notice of Privacy Practices controls.

We collect information to provide safe, effective, and compliant healthcare services and to improve your experience with PrevHealth. The information we collect depends on how you interact with us.

Information you provide

When you create an account, complete registration or intake forms, schedule appointments, participate in telehealth visits, communicate with our medical staff, or otherwise interact with our services, you may provide your full name, date of birth, phone number, email address, residential address, insurance information, and emergency contact details. We use this information to identify you, coordinate your care, verify insurance eligibility, communicate with you, and manage billing.

Health information

When you receive care from PrevHealth, we collect information needed to provide treatment, such as medical history, medications, allergies, vital signs, laboratory results, diagnostic information, clinical notes, appointment records, and readings from remote patient monitoring devices. With your permission, we may also record the audio of a visit so that our AI documentation tools can help draft your clinical note (see Section 5).

Payment information

Payments are processed securely through third-party payment processors such as Stripe or Square. PrevHealth does not store full credit card numbers or complete payment card details.

Website information

When you visit the public pages of our website, certain information may be collected automatically, such as your IP address, browser type, device information, pages visited, and general usage data. See Section 8 for how we use cookies and analytics.

We use the information we collect to:

Provide and manage healthcare services, including in-person care, telehealth visits, remote patient monitoring, and chronic care management;

Maintain accurate medical records, document clinical encounters, and coordinate your care;

Submit insurance claims through clearinghouses such as EZClaim and TriZetto, and process payments;

Send appointment reminders, intake forms, billing notifications, payment links, verification codes, and care coordination updates;

Improve website functionality, strengthen security, and support system performance; and

Comply with legal and regulatory requirements.

We do not sell personal information or patient data, and we do not use your health information for advertising.

PrevHealth is a healthcare provider subject to HIPAA. We handle PHI in accordance with HIPAA and applicable state laws, and we use administrative, technical, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction.

As described in our Notice of Privacy Practices, you have the right to inspect and obtain a copy of your medical records, request corrections, request an accounting of certain disclosures, request restrictions or confidential communications, and receive notice if a breach of your unsecured health information occurs. You will receive our Notice of Privacy Practices at your first visit, and we will ask you to acknowledge that you received it.

If you believe your privacy rights have been violated, you may contact our Privacy and Security Officer or file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.

PrevHealth uses artificial intelligence (AI) tools to support clinical documentation and workflow. These tools may transcribe and summarize visits, help draft clinical notes, organize information, and offer suggestions that support, but never replace, the professional judgment of your clinician.

A licensed clinician reviews and approves all AI-generated content, and all diagnosis and treatment decisions are made by qualified healthcare professionals.

We tell patients when AI tools are used in their care and ask for your consent before a visit is recorded. You may decline AI documentation or recording at any time, and doing so will not affect your care.

Every AI vendor that handles your health information must sign a Business Associate Agreement with us.

We do not permit our AI vendors to use your identifiable health information to train or improve their products.

Audio recordings are used only to create your visit documentation and are deleted once your clinician has finalized your visit note.

If you provide your phone number and consent to receive text messages, you may receive SMS communications from PrevHealth related to appointment reminders, registration links, intake forms, billing notifications, payment links, verification codes, and care coordination.

Message frequency varies depending on your interaction with our services. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for assistance. Opting out of SMS communications does not affect your ability to receive medical care.

We do not include detailed health information in text messages. No mobile information, text messaging opt-in data, or consent will be shared with third parties or affiliates for marketing or promotional purposes. Information may be shared with our messaging service providers only as needed to deliver messages to you.

We share information only as needed to provide healthcare services, operate our systems, or comply with law. Recipients may include:

Other healthcare providers involved in your care, laboratories, and e-prescription networks;

Health plans and insurance clearinghouses for billing and payment;

Service providers that support our operations, such as electronic health record and cloud hosting providers, billing and administrative support services, AI documentation tools, messaging services, and payment processors.

Service providers that handle PHI must sign a Business Associate Agreement requiring them to protect it as HIPAA requires, use it only for services to PrevHealth, and use or disclose only the minimum necessary information. Patient health information is stored in systems hosted in the United States. Some of our service providers support us from outside the United States; they may access information only through secure, U.S.-hosted systems under the protections of their agreements with us.

We may also disclose information when required by law, regulation, or court order, or to protect the health and safety of our patients or others, as described in our Notice of Privacy Practices.

We use cookies and similar technologies on the public pages of our website to keep the site working and to understand general traffic patterns. We use Google Analytics for this purpose on public pages only.

We do not use analytics, advertising, or social media tracking technologies on our patient portal, appointment scheduling, intake, telehealth, or payment pages, or on any page where you enter health information.

We do not use tracking pixels for advertising, sell website data, or engage in cross-site advertising.

You can set your browser to refuse cookies or use the Google Analytics Opt-out Browser Add-on. Some website features may not function properly without cookies.

We implement industry-standard safeguards designed to protect personal and health information, including encryption of data in transit and at rest, multi-factor authentication, role-based access controls, secure U.S.-based cloud infrastructure, access logging, and monitoring. We require our service providers to maintain comparable safeguards.

No internet-based system can guarantee absolute security. If a breach of your unsecured health information occurs, we will notify you as required by HIPAA and applicable state law.

Standard email is not always secure. Please do not send detailed health information to us by regular email; use our patient portal or call our office instead.

We retain medical records for at least the period required by the laws of the state where you received care, with longer periods for records of minors. Non-medical information is retained only as long as necessary to fulfill operational, legal, or regulatory requirements, and is then securely deleted or destroyed.

Your rights regarding your health information are described in Section 4 and in our Notice of Privacy Practices. You may also opt out of SMS messages, decline AI documentation or visit recording, and ask questions about how we handle website information. Depending on the law of your state, you may have additional rights.

To make a request, contact our Privacy and Security Officer at privacy@prevhealth.us. We may need to verify your identity before acting on a request. We will not discriminate against you for exercising your privacy rights.

Our website is not directed to children under 13, and we do not knowingly collect personal information from children online. Health information of minor patients is handled with a parent or legal guardian as permitted by law, except where state law allows a minor to consent to their own care.

Our website may link to third-party websites, such as payment or telehealth platforms. Their privacy practices are governed by their own policies, and we encourage you to review them.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Updates will be posted on this page with a revised "Last updated" date. Changes to our Notice of Privacy Practices will be made and made available as HIPAA requires.

Privacy and Security Officer: privacy@prevhealth.us

General inquiries: info@prevhealth.us

Toll-Free: 888-PREV-456

Burke, Virginia: (571) 650-2533

Folsom, Pennsylvania: (267) 814-2533

Pilot Point, Texas: Coming soon