Privacy Policy

7. Connected Apps and Patient-Directed Health Data

HIPAA protection depends on the receiving app

Many consumer health apps are not covered by HIPAA. When you direct us or another healthcare organization to send your health information to an app that is neither a HIPAA covered entity nor a business associate, the copy received by that app is no longer protected by HIPAA. The app's privacy policy and other applicable consumer-protection laws govern that copy. HIPAA continues to apply to protected health information we maintain in our covered healthcare or business-associate role. Connecting an app does not remove HIPAA protection from your clinical record held by us.

Access, use, exchange, sharing and sale

An authorized connection may access the health-data categories and time periods you approve, such as demographics, medications, allergies, visit information, laboratory results, claims or coverage information, depending on the source and permissions. We use information received through our connected-health services to provide the features you request, support care, display or import records, maintain security and meet applicable legal obligations. Authorized workforce members and contracted service providers may access it only for their permitted responsibilities. We disclose information to the app or recipient you authorize, service providers supporting these purposes, and others as permitted or required by law. A recipient's own policy explains its subsequent uses and sharing.

We prohibit the sale of health data entirely, including identifiable, de-identified and aggregated health data. We do not share health data with advertisers for targeted advertising. This no-sale policy also applies to service providers processing health data on our behalf. No patient consent, authorization, app connection or acceptance of terms permits a sale under this policy. Separate express consent is required before a materially different optional, non-sale use, together with any legally required authorization. An organizational change or acquisition does not authorize a sale of health data or remove these privacy commitments.

Your express consent

For optional patient-directed app services, we require your express consent, or that of your legally authorized representative, before health information is accessed, exchanged, used or shared through the connection. Review this policy and the receiving app's policy, the requested data and the purpose before selecting the authorization control. Using our website, accepting general terms or leaving a box unchecked is not consent to an optional app connection or a new use. You may decline. This requirement does not replace the separate legal bases for treatment, payment, healthcare operations or disclosures required or otherwise permitted by law.

Information from your device

We collect technical information needed to operate and secure the service, including IP address, browser or app details and activity logs. A SMART connection does not itself grant access to your contacts, text messages, device call history, precise location or an unrestricted photo library. Features such as telehealth, recording, scanning or uploading a document may request camera, microphone or selected-file access when you choose to use them. Where required, your browser or operating system asks for permission; you may decline or withdraw that permission in its settings. A third-party app may request additional device permissions under its own policy; review those separately.

Discontinue access and request disposal

To stop a third-party app's access to your Blaylar record, sign in to Connected apps and select Remove access. For a connection to an outside health system, use that system's app-access controls; an authorized Blaylar user can also disconnect it in Connected Health Systems. Contact our Privacy Officer below if you need help or cannot access these controls. Removing an app from your device alone may not revoke its access.

Withdrawal stops future access through the revoked connection; it does not recall information already received or undo an earlier lawful use. Ask the receiving app to delete its copies under its own disposal policy. For information held by Blaylar, request deletion through our Privacy Officer. We review the request, delete information eligible for disposal, and explain any retention needed for clinical records, security and audit evidence, legal duties or preservation holds. Disconnecting does not automatically erase information already incorporated into your medical record. Retained information remains protected and restricted to its permitted purpose; backup copies follow their protected retention and expiration process. We do not promise immediate deletion of every copy.

Privacy and security practices

Our development and privacy-review process is guided by applicable HIPAA requirements, CMS recommendations for app developers, the CARIN Alliance Code of Conduct principles and the ONC Model Privacy Notice's transparency categories. These resources guide review of consent, limited access, security, sharing and disposal; referencing them is not a claim of governmental approval, independent certification or CARIN accreditation. Read the CMS best practices, CARIN Code of Conduct, ONC Model Privacy Notice and privacy, security and HIPAA resources.