Effective date: April 12, 2026
This Notice of Privacy Practices ("Notice") applies to protected health information ("PHI") that Medlo Health, Inc., our affiliated covered entities, and our participating licensed clinicians create, receive, maintain, or transmit about you. We are required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") to maintain the privacy of your PHI, give you this Notice, and abide by its terms.
1. How we may use and disclose your PHI
Treatment
We may use and disclose your PHI to provide, coordinate, or manage your health care. For example, a clinician reviewing your intake may share your information with a pharmacist filling your prescription, or with another clinician consulting on your care.
Payment
We may use and disclose PHI to obtain payment for the services provided to you. This may include verifying eligibility, billing your insurance (if applicable), or processing payments.
Health care operations
We may use and disclose PHI for activities necessary to run our practice and improve the care we provide — for example, quality assessment, clinician training, credentialing, audits, and business management.
With your authorization
For most uses and disclosures of PHI that are not listed above — including uses or disclosures for marketing purposes, or disclosures that constitute a sale of PHI — we will obtain your written authorization. You may revoke that authorization in writing at any time.
Other permitted or required uses
- Public health activities, including disease reporting and adverse-event reports.
- Legal and regulatory requirements, including response to subpoenas, court orders, or government investigations.
- Law enforcement as permitted or required by law.
- Health oversight activities such as audits and inspections.
- Research that has been reviewed by an institutional review board or subject to your authorization.
- Serious threats to health or safety in good-faith circumstances.
- Business associates that help us operate the platform, under written agreements that require them to protect your PHI.
2. Your rights with respect to your PHI
- Right to access and copy. You may request access to and copies of your PHI that we maintain.
- Right to amend. You may request that we amend PHI you believe is incorrect or incomplete.
- Right to an accounting of disclosures. You may request an accounting of certain disclosures we have made of your PHI.
- Right to request restrictions. You may request restrictions on certain uses and disclosures of your PHI. We are not required to agree to all requested restrictions.
- Right to confidential communications. You may request that we communicate with you about medical matters in a specific way or at a specific location.
- Right to a paper copy of this Notice. You may request a paper copy of this Notice at any time.
- Right to be notified of a breach. We will notify you if a breach occurs that may have compromised your PHI.
To exercise any of these rights, contact our Privacy Officer at the address or email below.
3. Our obligations
- We are required by law to maintain the privacy of your PHI.
- We must provide you with this Notice of our legal duties and privacy practices regarding PHI.
- We must follow the terms of the Notice currently in effect.
4. Changes to this Notice
We reserve the right to change this Notice and our privacy practices at any time. If we make material changes, we will post the updated Notice on this page and make it effective for all PHI we maintain. The Notice effective date is shown above.
5. Complaints
If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.
6. Contact the Privacy Officer
Medlo Health, Inc. — Privacy Officer
2054 S. Euclid St, Ste H PMB#3130
Anaheim, CA 92802
Phone: +1 (310) 986-3292
Email: privacy@medlohealth.com