ChartMedic Privacy Policy

Effective date: November 16, 2021

This policy explains what information we collect when you use the ChartMedic site and when you or your patients use the accompanying mobile applications. It also describes how we store, use, transfer, and delete that information.

Our aim is not only to comply with privacy law, but to earn your trust.

Terms Used in this Policy

ChartMedic refers to our business organization and ChartMedic refers specifically to the corresponding website, which is wholly owned by the business organization.

Information We Collect & How We Use It

Information Collected From ChartMedic Users

ChartMedic doesn’t make money from ads. So we do not collect information to facilitate advertising to you. The tracking we do is there to make our service work as well as possible.

In order to provide the best possible experience using ChartMedic, we collect information from your interactions with our network. Some of this information, you provide (such as your email address). Other information, we collect based on your actions while using ChartMedic, such as which pages you visit and your interactions with features of those pages. This information includes records of your interactions, your Internet Protocol address, information about your device (such as browser type), and referral information.

We use this information to:

• Provide, test, improve, promote, and personalize ChartMedic.
• Generate aggregate, non-identifying information about how people use ChartMedic services.
• Prevent theft of ChartMedic content.

We do not ask you to authenticate with a third party service (like Facebook, Google, or Twitter) and we do not collect information about you from third parties.

Information Collected from Patients

We collect the following information anonymously from the interactions of patients with the ChartMedic mobile app (herein referred to as an interview):

1. Clinic the patient is visiting.
2. Provider with whom the patient’s appointment has been scheduled (for scheduled appointments).
3. Time and date of the appointment (for scheduled appointments).
4. Time and date the interview was completed.
5. Elapsed time for completion of each question answered by the patient, and for completion of the entire interview.
6. The patient-reported year of birth if it is less than 88 years prior to the date of interview completion.
7. Answers provided by the patient.

We do not collect any of the eighteen patient identifiers enumerated in the Health Insurance Portability and Accountability Act (HIPAA).

Each instance of our installed software on a mobile device has a unique identifier which is generated upon app installation. This identifier is used to associate software installations with clinics and is in no way generated from or related to any specific identifier of the device upon which the software is installed, such as device unique telephony numbers (IMEI, MEID, ESN, and IMSI), MAC addresses, Android build Serial Numbers, Android ANDROID IDs, and iOS UDIDs. This identifier is never directly associated with a patient’s interview responses.

Information Disclosure

Disclosure of Information Collected From ChartMedic Users

ChartMedic will not transfer information about you to third parties for the purpose of providing or facilitating third-party advertising to you. We will not sell information about you.

We may share your account information with third parties in the following circumstances:

1. When we have asked you to do so, and you have consented.
2. To a partner or service provider who meets our data protection standards for purposes of providing ChartMedic services.
3. When we have a good faith belief it is required by law, such as pursuant to a subpoena or other legal process.
4. When we have a good faith belief that doing so will help prevent imminent harm to someone.

If we are going to share your information in response to legal process, you will be notified so you can challenge it (for example by seeking court intervention), unless we’re prohibited by law or believe doing so may endanger others. We will object to requests for information about users of our services that we believe are improper.

Disclosure of Information Collected from Patients

ChartMedic will not transfer any information regarding a patient’s answers to questions answered within an interview to any third party except for the purpose of data storage (see next section).

Data Storage

ChartMedic uses third party vendors and hosting partners, such as Amazon, for hardware, software, networking, storage, and related technology we need to provide our service. We maintain logs of interactions with servers and with mobile applications. By using ChartMedic, you authorize ChartMedic to transfer, store, and use your information in the United States and any other country where we operate.

Cookies and Tracking

ChartMedic tracks you only when you are interacting with the ChartMedic network and sub-networks. ChartMedic does not track you across the Internet. Some third-party services that we use to provide the ChartMedic service, such as Google Analytics (http://www.google.com/policies/privacy/partners/), may place their own cookies in your browser. This Privacy Policy covers use of cookies by ChartMedic only and not the use of cookies by third parties.

We use Google Analytics for aggregated, anonymized website traffic analysis. In order to track your session usage, Google drops a cookie (_ga) with a randomly-generated ClientID in your browser. This ID is anonymized and contains no identifiable information like email, phone number, name, etc. We also send Google your IP Address. We do not send Google any information that uniquely identifies you to Google or to us.

We use GA to track aggregated website behavior, such as what pages you looked at, for how long, and so on. This information is important to us for improving the user experience and determining site effectiveness.

If you would like to access what browsing information we have - or ask us to delete any GA data - please delete your _ga cookies, reach out to us via this form, and/or install the Google Analytics Opt-Out Browser Add-On.

Modifying or Deleting Your Personal Information

If you have a ChartMedic account, you can access or modify your personal information, or delete your account here.

To protect information from accidental or malicious destruction, we may maintain residual copies for a brief time period. But, if you delete your account, your information and content will be unrecoverable after that time. ChartMedic may preserve and maintain copies of your information when required to do so by law.

Data Security

We use encryption (HTTPS/TLS) to protect data transmitted to and from our site. However, no data transmission over the Internet is 100% secure, so we can’t guarantee security. You use the Service at your own risk, and you’re responsible for taking reasonable measures to secure your account.

Email from ChartMedic

Sometimes we’ll send you emails about your account, service changes, or new policies. You cannot opt put of this “transactional” email (unless you delete your account). But, you can opt out of non-administrative emails such as digests, newsletters, and activity notifications through your account’s "Settings" page.

When you interact with an email sent from ChartMedic (such as opening an email or clicking on a particular link in an email), we may receive information about that interaction. We won’t email you to ask for your password or other account information. If you receive such an email, please send it to us so we can investigate.

Changes to this Policy

ChartMedic may periodically update this policy. We’ll notify you about significant changes to it. The most current version of the policy will always be here, and we will archive former versions of this policy here.

Questions

We welcome feedback about this policy at legal@chartmedic.com.