Alert Notification Privacy Statement
Last Updated: January 2010
We comply with the HONcode standard for trustworthy health information.
At Alert Notification, we respect and protect the privacy of our customers. We want to give you the security and confidence you need to fully participate in our online business so that we can better serve your needs. This Privacy Statement provides details of our approach to privacy and how we collect, use and protect your personal information.
This privacy statement applies to the data collected by Alert Notification, or those working on our behalf, through the Alert Notification Personal Health Application (the "Service"). It does not apply to data collected through other online or offline Alert Notification sites, products, or services.
The Service is a personal health information management tool and patient portal that lets you gather, edit, augment, store, and share health information online. With the Service, you can control your own health records. You can also share your health information with family, friends, and healthcare professionals, and have access to online health and wellness information management tools and content.
You can also store health information for other people (such as your family) in one place. You should store and access each person's information in separate accounts, but you may grant or receive access to accounts via the Alert Notification sharing and permissions feature.
You can choose to share information with separate tools, services, and systems that can connect with the Service ("Programs") to better use, edit and add to your health record. Programs can help you manage your information and find relevant health information.
You can choose to share specific information (or all information) with:
- Other people (such as friends and family)
- Tools, services, applications, websites, and services
Collection of your personal information
The Service asks you to enter an identifier and password to sign in. The Service currently accepts either Windows Live ID or OpenID from Microsoft HealthVault or a username/password combination that you create directly with Alert Notification. Alert Notification does not issue OpenIDs or Windows Live IDs, and does not endorse OpenID or Windows Live ID or any particular OpenID provider. Before you choose to use OpenID or Windows with the Service, we recommend that you evaluate the security and privacy commitments offered by the OpenID issuer and/or Windows Live ID and decide if they are appropriate for your Alert Notification account.
When you sign in using Windows Live ID, we refer to the e-mail address and password you use as your Windows Live ID or your Microsoft Passport Network credentials. After you create your Windows Live ID, you can use the same credentials to sign in to many different Microsoft sites and services, as well as those of select Microsoft partners that display the Windows Live ID or Microsoft Passport Network logos. When you sign in to one Alert Notification site or service, you may find that other Microsoft sites and services automatically sign you in when you visit those sites and services.
The first time you sign in to the Service, the Service asks you to create an account. To create an account, you must provide personal information such as name, date of birth, e-mail address, postal code and country/region.
We will use the e-mail address you provide when you create your account to include in sharing invitations you send through the Service and to send you Service notifications, such as e-mail notification that information is available to add to your account. As described in their privacy statements, Programs may also use your e-mail address.
You choose what information to put in your records. Examples of the types of information you can store in a record include:
- Health History
- Vitals and Health Measurements such as blood glucose and blood pressure
- Scanned Medical Records
- Medical Images such as MRI or X-Ray
- Lab Results
By default, you are the custodian of any records you create. You may invite additional people to be custodians. Each custodian can add and remove other custodians and users who can view and modify the record. Some of the information stored in the records you manage may be highly sensitive, so you need to consider carefully with whom you choose to share the information. A record may have multiple custodians.
Transmissions over the Internet are never 100% secure or error-free. However, we take reasonable steps to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. For more details, please review our Security Policy.
Sharing your Personal Health Information
A key value of the Service is the ability to share your health information with people and services who can help you meet your health-related goals. For example, you can share your health information to:
- Co-manage the health of a family member or loved one
- Consult with your health care provider or another medical professional
- Provide information to coaches and trainers
- Provide information to a health advocate or health navigator
You can share information in a health record you are custodian of with another person by sending a sharing invitation e-mail through the Service. If the person accepts your sharing invitation and has or creates a Service account, you have given him or her access to that information. You can specify how long they have access and whether they can modify the information in the record. Each person who accepts a sharing invitation can grant Programs the same level of access that the person has.
You can also choose to grant custodian access to other persons, such as your spouse, for any record of which you are a custodian. Custodian access is the broadest level of access, so you should think carefully before you grant custodian access to a record. Every custodian of a record has the same access to the record, including accessing, modifying, deleting, and sharing all the information in the record. A custodian can also revoke access to a record from any other custodian of the record, including you.
Service users with whom you have shared your records can also give a Program access to those records. You can see a complete history of how Programs have accessed the information in your records by using the History feature in your Alert Notification account.
How we use your personal information
We use personal information collected through the Service, including health information, to provide the Service, and as described in this Privacy Statement. We do not use or disclose your information except as described in this Privacy Statement.
In support of these uses, Alert Notification may use personal information:
- To provide you with important information about the Service, including critical updates and notifications
- To send you the Alert Notification e-mail newsletter if you opt-in
- To determine your age and location to help determine whether you qualify for an account
Alert Notification may access and/or disclose your personal information as required by law, in the good-faith belief that disclosure is necessary or in the interest of protecting or exercising our or others' legal rights e.g., without limitation, in connection with requests from law enforcement officials, in connection with court proceedings or disputes or to protect the personal safety and welfare of users of Alert Notification services or members of the public.
Personal information collected on the Service is stored and processed in the United States of America.
How we use aggregate information and statistics
Alert Notification may use aggregated information from the Service to improve the quality of the Service and for marketing of the Service (for example, to tell potential advertisers how many Service users live in the United States). This aggregated information is not associated with any individual account. Alert Notification does not use your individual account and record information from the Service for marketing without Alert Notification first asking for and receiving your opt-in consent.
By providing your telephone number to us, you agree that such action constitutes a purchase, inquiry and/or application for purposes of telemarketing laws. Regardless of the fact that your telephone and/or cell phone number may be listed with the Federal Do-Not-Call Registry, or your local State Do-Not-Call list, you expressly consent to receive future information about products and services from Alert Notification via telephone unless you notify us in writing otherwise.
Account access and controls
You choose whether to create an account with the Service. The required account information consists of a small amount of information such as your name, e-mail address, region, and Service credentials. We may request other optional information, but we clearly indicate that such information is optional. You can review and update your account information. You can modify, add, or delete any optional account information by signing into your Alert Notification account and editing your account profile.
You can close your account at any time by signing into your Alert Notification account and editing your account profile. We wait 180 days before permanently deleting your account information in order to help avoid accidental or malicious removal of your health information.
When you close your account, the Service deletes all records for which you are the sole custodian. If you share custodian access for a record, you can decide whether to delete the record from the Service. You should think carefully before you grant custodian access to your records. Contact Customer Service at email@example.com to reopen an account.
Record access and controls
The Service allows an account to manage multiple health records. This feature enables, for example, family health managers to create and manage records for family members.
When you create a record, you become a custodian of that record. As a custodian, you decide what level of access to grant other users of the Service or Programs. The Service creates a fixed list of each access or change by users, which the Service keeps as a full history of the record. You can view and update records you are custodian of and can examine the history of access and changes to those records.
Sharing records with other Service users
The level of access you can grant as a custodian include:
- View-only access
- View-and-edit access
- Custodian access
Access becomes active only when the recipient accepts the invitation.
Custodian access is the highest level of access. A custodian of a health record can:
- Read the record
- Change the record
- Delete the record
- Grant to others any level of access to the record, including custodian access
- Revoke the access of anyone to a record, including other custodians, and including the custodian who granted them custodian access in the first place
Because inappropriate granting of access could allow a grantee to violate your privacy or even revoke your access to your own records, we urge you to consider all the consequences carefully before you grant access to your records.
You can delete any health record that you are a custodian of by signing in to your Alert Notification account and editing a record's profile. If other users had any level of access to that record, the record no longer appears in their accounts. The Service deletes the record from all users. We wait 180 days before permanently deleting the record information in order to help avoid accidental or malicious removal of your health information.
Links to Other Websites
Our websites may contain links to other websites. We are not responsible for the content or privacy practices of those websites, including the use of personally identifiable information about you collected by those websites. We do not intentionally transfer any personally identifiable information about you to websites that we link to.
The site is intended for adults in the United States. We do not intentionally or knowingly collect personally–identifiable information from children under the age of 13. We request that individuals under the age of 13 not submit any personal information on the site.
Security of your personal information
Alert Notification is committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use, and disclosure. For example, we store the personal information you provide on computer servers with limited access that are located in controlled facilities.
The Service sends all communications, except e-mail, using encryption (that is, HTTPS).
You can view a history of access and actions to any Health Record of which you are a custodian.
Enforcement of this privacy statement
If you have questions regarding this statement, you should first contact us via http://www.alert-usa.com.
Changes to this privacy statement
We may occasionally update this privacy statement. When we do, we will also revise the "last updated" date at the top of the privacy statement. We encourage you to review this privacy statement periodically to stay informed about how we are helping to protect the personal information we collect. Your continued use of the Service constitutes your agreement to this privacy statement and any updates. Please be aware that this privacy statement and any choices you make on the Service do not necessarily apply to personal information you may have provided to Alert Notification in the context of other, separately operated, Alert Notification products or services.
We also encourage you to provide feedback and comments about the Service using the Contact Us link in the footer of each Service web page or using the contact information below.
Alert Notification welcomes your comments regarding this privacy statement. If you have questions about this statement or believe that we have not adhered to it, please contact our customer service at firstname.lastname@example.org
420 Broad Street, Suite 201
Chattanooga, TN 37402