Notice of Privacy Practices

Introduction

This Notice of Privacy Practices describes how your protected health information (PHI) may be used and disclosed by Care Navigation Advocates, LLC (known as the company), and how you can access your information. We are committed to protecting your privacy and complying with all applicable laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Our Obligations Under HIPAA

We are required by HIPAA to maintain the privacy and security of your PHI. We must provide you with this notice about our privacy practices, follow the terms of this notice, and notify you if a breach of your unsecured PHI occurs.

Your Rights Regarding Your Health Information

• Access: You have the right to inspect and obtain a copy of your PHI maintained by us, with certain exceptions. To exercise this right, you may submit a written request to our Privacy Officer.
• Amendment: If you believe your PHI is incorrect or incomplete, you have the right to request an amendment.
• Restrictions: You may request restrictions on certain uses or disclosures of your PHI.
• Confidential Communications: You may request to receive communications about your PHI in a specific way or at a specific location.
• Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI.
• Paper Copy of Notice: You may request a paper copy of this notice at any time.

How We May Use and Disclose Your PHI

We may use or disclose your PHI for purposes of treatment, payment, and health care operations, research, and quality assurance as well as when required by law. Other uses and disclosures will be made only with your written authorization.

This privacy policy applies to all information collected through:

• Care Navigation Advocates mobile application (the app) and/or website.
• Associated services and integrations that the app or website have access.

By using our platform, you acknowledge that you have read and understood this Privacy Policy and agree to abide by the policy.

• How We May Use and Disclose Your PHI:
• We can use and disclose your PHI without your authorization for routine purposes under Referral, Treatment, Claim/Payment, and Healthcare Operations.
• Treatment: Sharing information with healthcare providers to coordinate your care, treatments, medication reminders, lab and
• Claims/Payment: Using your information to obtain claims and payment information.
• Healthcare Operations: Application performance and integration.
• Research: Using deidentified data for research purposes.

Remedies for Breach of PHI

If a breach of your unsecured PHI occurs, we will notify you promptly. We will investigate the breach, mitigate any potential harm, and take corrective actions to prevent future breaches. You may also file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.

How to Access Your Information

To request access to your health information, submit a written request to our Privacy Officer at the contact information provided below. We will respond to your request within 30 days, as required by law.

Contact Information

If you have questions about this notice or your privacy rights, please contact our Privacy Officer at:

Changes to This Notice

We reserve the right to change this notice and our privacy practices at any time. The revised notice will be effective for all PHI that we maintain. We will post a copy of the current notice in our office and on our website.