Privacy policy

This policy explains what Equity Care Data, LLC ("Equity Care Data", "we", "us") collects, how we use it, and the choices you have. It applies to this website and to the Equity Care Data mobile application.

Information we collect

• Account information. The identifiers you use to create and access your account, and the contact details you choose to give us.
• Records you ask us to retrieve. The providers you identify, the authorizations you sign, and the medical records those providers release to us on your behalf.
• Dependents you manage. Where you are authorized to act on behalf of another person, the same categories of information for that person.
• Service data. Basic technical information needed to operate and secure the service, such as device type and application error reports.

How we use it

• To request, retrieve, and organize your medical records at your direction.
• To structure and de-identify those records so they can be used in health research.
• To license de-identified datasets to research organizations, and to calculate and distribute the participant share of that revenue.
• To operate, secure, support, and improve the service, and to meet our legal obligations.

Consent

We do not request records from a provider without a signed authorization from you, and we do not include your information in a licensed dataset without your explicit consent. You may withdraw consent at any time. Withdrawal stops future use of your information; datasets already licensed and delivered cannot be recalled, and we will tell you plainly what that means for you at the time you consent.

De-identification

Before your health information enters any dataset we license, direct identifiers are removed and replaced with a token that has no meaning outside our systems. The key capable of re-linking a token to a person is stored separately from the health information and is not provided to any licensee. Licensees receive de-identified information only.

Who we share information with

• Healthcare providers, when acting on your authorization to obtain your records.
• Service providers who host, secure, or support our systems under contractual confidentiality and security obligations.
• Research licensees, who receive de-identified datasets only.
• Authorities, where we are required by law to disclose information.

We do not sell your personal information to advertisers, data brokers, or marketers.

Security

Information is encrypted in transit and at rest. Access to systems containing identifiable information is restricted to personnel who need it, and the re-linkage key is held under separate controls from the health information itself.

Retention

We keep identifiable information for as long as your account is active and for the period afterwards required to meet our legal, accounting, and contractual obligations, then delete or de-identify it. De-identified information may be retained indefinitely, as it no longer identifies you.

Your choices

• Request a copy of the information we hold about you.
• Ask us to correct information that is inaccurate.
• Withdraw consent for future use of your records.
• Close your account and request deletion, subject to the retention limits above.

To exercise any of these, contact us at info@equitycaredata.com.

Children

The service is not directed to children, and accounts may only be created by adults. An adult with legal authority may manage records on behalf of a dependent minor.

Changes to this policy

If we change this policy we will update the date above and, where the change is significant, notify you directly before it takes effect.

Contact

Equity Care Data, LLC
info@equitycaredata.com