Consumer Health Data Notice
This Notice is provided in addition to our Privacy Policy and applies specifically to "consumer health data" as defined by Washington state's My Health My Data Act (Revised Code of Washington Chapter 19.373) ("MHMDA") and by similar laws in other states that define a category of consumer health data. If you reside in Washington, the rights and commitments in this Notice apply to you with the force of Washington law. We extend most of the same commitments to users outside Washington as a matter of policy.
1. What is consumer health data
Consumer health data is personal information that identifies you and is linked or reasonably linkable to information about your past, present, or future physical or mental health status. In EmpowerMyCare, this includes information you enter or upload about diagnoses, conditions, symptoms, treatments, medications, procedures, health measurements, provider visits, health-related location (for example, visits to a medical facility), and health information extracted from documents or photos you upload.
2. Categories of consumer health data we collect
With your direct input or upload: identifiers (name, email), health conditions and diagnoses, medications and prescription details, allergies, provider and pharmacy contacts, appointment dates and locations, insurance policy information, clinical notes you choose to record, uploaded documents and images (including lab results, visit summaries, prescription photos, insurance cards, and health-related photographs), and tasks related to health management. We collect this data from you (or from a Care Team Member you have authorized) and from no other source.
3. Purposes of collection and use
We collect and use consumer health data only to provide the Service to you — organizing your records, reminding you of appointments and medications, powering the Ask Liz assistant when you ask a question, checking for potential drug interactions, and enabling the Care Team Members you invite to help you. We do not use consumer health data for advertising, profiling, or any purpose unrelated to providing the Service.
4. Sources of consumer health data
You. Only you. Or a Care Team Member you have invited and authorized. We do not buy, license, or receive consumer health data from healthcare providers, insurers, data brokers, EHR vendors, or any other third party.
5. With whom we share consumer health data
We share consumer health data only with: (a) service providers listed in our Privacy Policy that process data on our behalf under contract, for the sole purpose of delivering the Service; and (b) Care Team Members you personally invite, in the scope you select. We do not sell consumer health data. We do not share consumer health data for targeted advertising. We do not share consumer health data with any healthcare provider, insurer, or government agency except in response to a valid legal process, as described in our Privacy Policy.
6. Your rights under the My Health My Data Act
If you are a Washington resident, you have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data.
- Access the consumer health data we have collected about you, including a list of the categories of third parties and specific affiliates with whom the data has been shared or sold.
- Withdraw consent to our collection and sharing of your consumer health data.
- Delete your consumer health data. We will also direct our sub-processors and any third party we have shared the data with to delete it.
- Appeal a denial of any of the above.
To exercise any of these rights, email privacy@empowermycare.net from the address associated with your account, or use the Export or Delete Account buttons in Settings. We will respond within 45 days. If we decline a request, we will explain why and you may appeal by replying to our response or emailing legal@empowermycare.net; we will decide the appeal within 45 additional days and, if we deny the appeal, tell you how to contact the Washington Attorney General.
7. Consent — collection
We collect consumer health data only with your consent, which you provide by entering the data yourself, uploading a document or photo, or authorizing a Care Team Member to do so on your behalf. You can withdraw consent at any time by deleting the item or deleting your account.
8. Consent — sharing
We do not share consumer health data with any third party for their own purposes. We share it only with service providers (Section 5 above) strictly to operate the Service, and only with Care Team Members you invite. These are not "sales" or "shares for targeted advertising" under MHMDA. We do not sell consumer health data. We will not sell it in the future without first obtaining your separate, opt-in, authenticated consent, presented as a standalone request distinct from these Terms.
9. Geofencing
EmpowerMyCare does not use geofencing around any healthcare facility, and does not collect, use, or infer consumer health data based on your physical presence at a healthcare facility. The only "location" we associate with your health is the location you yourself type in (for example, entering a doctor's office address).
10. Data minimization and retention
We collect only the consumer health data you choose to enter. We retain it for as long as your account is active and delete it within 30 days of account deletion, except as required by law.
11. Security
We protect consumer health data with the security measures described in Section 8 of our Privacy Policy. Access is restricted to personnel with a need to know for operating the Service.
12. Changes to this Notice
If we change this Notice, we will notify you by email and by in-app notice at least 14 days before the change takes effect.
13. Contact
To exercise any right described here, to ask a question, or to file an appeal:
Hydromation Corporation
Attn: Privacy Officer
42461 Spring Splendor Drive
Ashburn, VA 20148
privacy@empowermycare.net
Washington residents may also file a complaint with the Washington Attorney General at atg.wa.gov/file-complaint.