Privacy & Data Rights

Your health data is yours. We protect it and give you complete control.

Patient Rights

Right to Access

View and download all your health data at any time

Right to Correct

Request corrections to inaccurate information

Right to Delete

Request deletion of your data (with some exceptions)

Right to Portability

Export your data in machine-readable formats

Data Handling Practices

Data Minimization

We only collect data necessary for your recovery support

Purpose Limitation

Your data is only used for the purposes you consent to

Encryption

All data encrypted at rest (AES-256) and in transit (TLS 1.3)

Access Controls

Strict role-based access ensures minimum necessary access

Audit Trails

All data access is logged and auditable

Third-Party Vetting

All vendors handling data are vetted and under BAAs

Data Retention

Active Patient Data

Duration of care + 7 years (HIPAA requirement)

Audit Logs

7 years (HIPAA requirement)

De-identified Analytics

Indefinite (for research and improvement)

Your Data, Your Control

Request access, correction, or deletion at any time

Privacy Questions?

Our privacy team is here to help with any questions or requests.

Contact Privacy Team