CaringHand Logo

    HIPAA Notice of Privacy Practices

    Effective Date: November 1, 2025

    Introduction

    This Notice of Privacy Practices describes how CaringHand™ Medical Group ("CaringHand Medical", "we", "us", or "our") may use and disclose your protected health information (PHI) to carry out treatment, payment, or healthcare operations, and for other purposes permitted or required by law. This notice also describes your rights regarding your health information.

    CaringHand Medical is required by law to maintain the privacy of your health information and to provide you with this notice of our legal duties and privacy practices. We are also required to follow the terms of this notice currently in effect.

    About Our Organization

    Covered Entity

    CaringHand Medical Group is a covered entity under HIPAA, providing medical services through licensed healthcare providers specializing in cancer survivorship care.

    Business Associate

    Adaptic Health, Inc. serves as a business associate to CaringHand Medical, operating the technology platform that facilitates medical services. Adaptic Health is contractually bound to protect your health information in accordance with HIPAA requirements.

    How We May Use and Disclose Your Health Information

    For Treatment

    We may use and disclose your health information to provide, coordinate, or manage your healthcare and related services. This includes:

    • Providing cancer survivorship care and consultations
    • Coordinating care among your healthcare team
    • Communicating with your primary care physician or other specialists
    • Prescribing medications and monitoring treatment
    • Referring you to other healthcare providers when appropriate

    Example: Your CaringHand Medical provider may share your survivorship care plan with your oncologist to ensure coordinated care.

    For Payment

    We may use and disclose your health information to obtain payment for services we provide. This includes:

    • Billing and collection activities
    • Determining insurance coverage and eligibility
    • Processing insurance claims
    • Reviewing services for medical necessity
    • Utilization review and pre-authorization

    Example: We may submit a claim to your insurance company that includes diagnostic codes and treatment information.

    For Healthcare Operations

    We may use and disclose your health information for healthcare operations, including:

    • Quality assessment and improvement activities
    • Provider performance evaluation and training
    • Business planning and development
    • Customer service and complaint resolution
    • Compliance and auditing activities
    • Care coordination and case management

    Example: We may review patient cases for quality improvement or use de-identified data to improve CaringHand AI.

    Other Permitted Uses and Disclosures

    To You

    We will disclose your health information to you or your personal representative as described in the "Your HIPAA Rights" section below.

    Treatment Alternatives

    We may use your health information to tell you about or recommend possible treatment options or alternatives that may be of interest to you.

    Health-Related Services

    We may use your health information to tell you about health-related services that may be of interest to you.

    Appointment Reminders

    We may contact you to remind you about appointments or follow-up care.

    Business Associates

    We may disclose your health information to business associates who perform functions on our behalf or provide us with services, provided they agree to safeguard the information.

    Uses and Disclosures Required by Law

    We will disclose your health information when required to do so by federal, state, or local law, including:

    Public Health Activities

    • Reporting diseases, injuries, or disabilities
    • Reporting adverse events related to medical products
    • Notification to public health authorities about potential exposure to communicable diseases

    Abuse, Neglect, or Domestic Violence

    We may disclose information to appropriate authorities if we reasonably believe you are a victim of abuse, neglect, or domestic violence.

    Health Oversight Activities

    We may disclose information to health oversight agencies for activities such as audits, investigations, inspections, or licensure.

    Judicial and Administrative Proceedings

    We may disclose information in response to a court order, subpoena, discovery request, or other lawful process.

    Law Enforcement

    We may disclose limited information to law enforcement for specific purposes, such as identifying or locating a suspect or reporting certain types of injuries.

    Coroners, Medical Examiners, and Funeral Directors

    We may disclose information to coroners, medical examiners, or funeral directors as necessary to carry out their duties.

    Serious Threats to Health or Safety

    We may use and disclose information when necessary to prevent a serious threat to your health or safety or the health or safety of others.

    Uses and Disclosures Requiring Your Authorization

    Other uses and disclosures of your health information not covered by this notice or applicable law will be made only with your written authorization. You may revoke your authorization in writing at any time, except to the extent we have already taken action in reliance on your authorization.

    We will obtain your authorization before using or disclosing:

    • Psychotherapy notes (if applicable)
    • Health information for marketing purposes
    • Health information in exchange for payment from a third party

    Your HIPAA Rights

    Right to Access Your Health Information

    You have the right to inspect and obtain a copy of your health information that may be used to make decisions about your care. To request access, contact us in writing using the information provided at the end of this notice. We may charge a reasonable fee for copying and mailing costs.

    We may deny your request in certain limited circumstances. If we deny your request, you may request that the denial be reviewed.

    Right to Request Amendment

    If you believe your health information is incorrect or incomplete, you may request that we amend it. Your request must be in writing and include a reason for the amendment.

    We may deny your request if the information was not created by us, is not part of the records we keep, is not part of the information you would be permitted to inspect, or is accurate and complete.

    Right to an Accounting of Disclosures

    You have the right to receive a list of certain disclosures we have made of your health information. The list will not include disclosures made for treatment, payment, healthcare operations, or disclosures made to you or with your authorization.

    Right to Request Restrictions

    You have the right to request restrictions on how we use or disclose your health information for treatment, payment, or healthcare operations. You also have the right to request limits on disclosures to those involved in your care.

    We are not required to agree to your request, except in the case where you pay out-of-pocket in full for services and request that we not disclose information to your health plan solely for payment or healthcare operations purposes.

    Right to Request Confidential Communications

    You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you may ask that we contact you only at work or by mail.

    We will accommodate reasonable requests. You must specify how or where you wish to be contacted.

    Right to a Paper Copy of This Notice

    You have the right to a paper copy of this notice, even if you have agreed to receive it electronically. You may request a copy at any time by contacting us.

    Right to Notification of a Breach

    You have the right to be notified if there is a breach of your unsecured health information.

    Complaints

    If you believe your privacy rights have been violated, you may file a complaint with CaringHand Medical or with the U.S. Department of Health and Human Services Office for Civil Rights.

    You will not be penalized or retaliated against for filing a complaint.

    To file a complaint with us:

    Email: compliance@getcaringhand.com

    Subject: HIPAA Privacy Complaint

    To file a complaint with HHS:

    U.S. Department of Health and Human Services

    Office for Civil Rights

    Website: hhs.gov/ocr/privacy/hipaa/complaints

    Changes to This Notice

    We reserve the right to change this notice and to make the revised notice effective for health information we already have as well as any information we receive in the future. We will post the current notice on our website at getcaringhand.com/hipaa and make copies available upon request.

    Contact Information

    For questions about this notice or to exercise your rights, please contact:

    CaringHand Medical Group

    Privacy Officer

    Email: hipaa@getcaringhand.com

    Website: getcaringhand.com