MediRX Legal
Consumer Health Data Privacy Policy
This policy explains how MediRX, Inc. ("MediRX," "we," "us"), collects, uses, and shares "consumer health data" as defined by the Washington My Health My Data Act and similar laws in Nevada and Connecticut. It applies to residents of those states and to anyone whose consumer health data is collected in Washington. It supplements our Privacy Policy. Protected health information that is covered by HIPAA is handled under the HIPAA Notice of Privacy Practices instead.
Consumer health data we collect
- Health conditions, symptoms, diagnoses, and medical history you share in your intake or messages
- Medications, allergies, treatments, and prescriptions
- Body measurements, including height, weight, and body mass index
- Pregnancy and reproductive status
- Photos or documents you upload about your health
- Information that identifies you as seeking weight-management or other health care, including inferences drawn from the information above
- General location (state or city derived from your IP address) when it is used to determine eligibility for care
How we collect it
- Directly from you, when you complete the intake, create an account, check out, or message your care team
- From the independent medical group that treats you and from the pharmacy that fills your prescription
- Automatically, when you use our Sites (limited to general location and the fact that you visited a health-related page)
Why we collect and use it
- To provide the telehealth services you request, including routing your intake to a licensed clinician
- To process payment, fill prescriptions, and ship orders
- To communicate with you about your care, orders, and account
- To keep the Services safe and secure and prevent fraud
- To comply with law
We do not use consumer health data for advertising, and we do not sell it.
Your consent
Washington residents give separate consent to the collection of consumer health data and to its sharing before we collect it. You may withdraw consent at any time by emailing care@medirx.org. If you withdraw consent, we may no longer be able to provide the Services.
Your rights
You have the right to:
- confirm whether we collect, share, or sell your consumer health data;
- access your consumer health data, along with a list of all third parties and affiliates with whom we have shared it and how to contact them;
- withdraw your consent to collection and sharing; and
- request that we delete your consumer health data, including from our service providers and any third parties that received it.
To exercise a right, email care@medirx.org with "Consumer Health Data Request" in the subject line, or call (302) 204-2197. We will verify your identity using information in your account and respond within 45 days, which may be extended once by 45 days when reasonably necessary. These rights are free to use up to twice in any 12 months.
Some records must be kept by your medical group or pharmacy under medical-record and pharmacy laws. When we cannot delete information for that reason, we will tell you.
Appeals
If we deny your request, you may appeal by replying to our response with "Appeal" in the subject line. We will respond to your appeal within 45 days. If we deny your appeal, you may contact your state attorney general: the Washington State Office of the Attorney General at www.atg.wa.gov, the Nevada Attorney General at ag.nv.gov, or the Connecticut Attorney General at portal.ct.gov/ag.
Geofencing
We do not use geofences around health care facilities to collect consumer health data or to send messages or advertising.
Contact us
MediRX, Inc., Attn: Privacy, 30 N Gould St Ste R, Sheridan, WY 82801 · care@medirx.org · (302) 204-2197