Privacy

Privacy Notice and Authorization

My Med Ally is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. This Privacy Notice and Authorization applies to the My Med Ally website and other software used by My Med Ally and governs personal and healthcare data collection and usage. By using the My Med Ally website or any affiliated websites or software and affirmatively acknowledging this Privacy Notice and Authorization, you consent to the data practices described in this Notice and Authorization.

What Information is Collected About You:

As a member of a My Med Ally program, your personal and health information, including, but not limited to, your name, address, telephone number, email address, social security number, member identification number, medical records, billing records, claims information, information on your medical conditions, prescribed medications, health risk status, and other health and wellness-related information ("Personal Health Information"), needs to be collected, maintained and made available to My Med Ally employees and strategic partners so that My Med Ally can administer the various programs it offers. This health information may constitute "genetic information" if the employer gathers health information from an employee's family members, such as their spouse or children. My Med Ally also collects anonymous demographic information, which is not unique to you, such as your age, zip code, gender, preferences and interests.

How Your Information May Be Used or Disclosed:

My Med Ally will use and disclose your Personal Health Information only as necessary to administer My Med Ally's Programs. For example, we may use your Personal Health Information to assist you and provide guidance for an opened case service. We may also disclose your Personal Health Information with contracted service providers and trusted strategic partners. My Med Ally does not use or disclose sensitive personal information, such as race, religion, or political affiliations, without your explicit consent. Under no circumstances will genetic information be used for underwriting purposes. There is also information about your computer hardware and software that is automatically collected by My Med Ally. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used by My Med Ally for the operation of the service, to maintain the quality of the service, and to provide general statistics regarding use of the My Med Ally website. My Med Ally cannot read or access any of your private online communications, other than those sent specifically to My Med Ally.

My Med Ally collects and uses your Personal Health Information to operate the My Med Ally website and to deliver the services you have requested. The only persons who will receive your individually identifiable health information are you and the persons or entities who need the information so health and wellness services can be delivered to you. My Med Ally does not sell, exchange, share, transfer or otherwise disclose your health information except as needed to carry out specific activities related to the wellness program. For example, My Med Ally may share data with trusted strategic partners, some of whom may provide services on the My Med Ally website. Other strategic partners may help us perform statistical analysis, send you email or provide customer support. All such third parties are prohibited from using your personal information except to provide these services on My Med Ally’s behalf, and they are required by contract, if not law, to maintain the privacy and security of your personal information. However, it should be noted that once your Personal Health Information is re-disclosed to or by third parties, it may no longer be protected by the HIPAA privacy rule. In addition, My Med Ally also does not sell, rent, or lease its customer lists to third parties.

As a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA), My Med Ally will ensure your right to access and amend your Personal Health Information, or to obtain an accounting of disclosures. Any questions or complaints about your Personal Health Information can be directed to My Med Ally's designated privacy officer at (800) 394-0942, or the Secretary of U.S. Department of Health and Human Services (HHS) if you believe your privacy rights have been violated. Not retaliatory actions will be taken against you for filing a complaint. In the event of a breach of your Personal Health Information, My Med Ally will notify you pursuant to your agreement with your plan.

Use of Cookies

The My Med Ally website uses "cookies" to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the web server that you have returned to a specific page. For example, if we allowed you to personalize your My Med Ally pages or logins, or register with the My Med Ally site or services, a cookie helps My Med Ally to recall your specific information on subsequent visits. This simplifies the process of recording your personal information. When you return to the same My Med Ally website, the information you previously provided can be retrieved, so you can easily use the My Med Ally features that you customized.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the My Med Ally website.

Your Use of Other Websites

My Med Ally encourages you to review the privacy notices of websites you choose to link to from My Med Ally so that you can understand how those websites collect, use and share your information. My Med Ally is not responsible for the privacy notices or other content on websites outside of the My Med Ally website.

Disclaimer:

My Med Ally does not provide health insurance or medical services, nor does it recommend treatment. Consequently, all medical services are provided by independent healthcare practitioners, who are not employees or agents of My Med Ally. My Med Ally provides administrative and informational services through its employees. All of My Med Ally's services are offered in a manner that fully respects and protects the privacy of our members and the confidentiality of their Personal Health Information.

Security of your Personal Information:

As a HIPAA Business Associate, My Med Ally follows the HIPAA Security Rule and trains its employees on privacy and security requirements. My Med Ally secures your Personal Health Information on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. When personal information is transmitted to other websites, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol.

Changes to this Notice:

My Med Ally will occasionally update this Privacy Notice to reflect Company and customer feedback or changes in law. My Med Ally encourages you to periodically review this Privacy Notice to be informed about how My Med Ally is protecting your information.

Contact Information:

My Med Ally welcomes your comments regarding this Privacy Notice and Authorization. If you believe that My Med Ally has not adhered to this Notice, please contact us via telephone at (800) 394-0942 or via email at support@mymedally.com. We will use commercially reasonable efforts to promptly determine and remedy your concern.

Authorization

By clicking "Agree" on this website, I hereby authorize My Med Ally or the employer, if necessary, to use or disclose my health information collected during my health screening for the purposes of my continued participation in the program. This authorization expires upon termination of my enrollment in the wellness program unless another date is indicated to My Med Ally.

I further agree, understand, and acknowledge my rights in relation to the following:

This Notice and Authorization is meant to address federal laws regulating the form and content of notices and authorizations for use and disclosure of health and genetic information, including, but not limited to, the Americans with Disabilities Act (ADA), the Genetic Information Nondiscrimination Act (GINA) and the Health Insurance Portability and Accountability Act (HIPAA).
I may refuse to agree to this Notice and Authorization. But if I do refuse to provide my authorization, I may not participate in the program.
My Med Ally will ensure my rights of access, amendment and accounting with respect to the Personal Health Information it maintains about me on behalf of HIPAA covered entities.
I am entitled to a copy of this authorization upon request.
I may ask questions about the health information collected about me or make requests about this Notice and Authorization by contacting My Med Ally’s Privacy Officer at (800) 394-0942.
I may also complain to My Med Ally, if I believe my privacy rights have been violated, and no retaliatory actions will be taken against me for filing a complaint.