Consumer Health Data Privacy Policy

“Consumer health data” means information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health. On myDxHub that includes your records and results, and anything about you that reveals them.

Some of what myDxHub holds is also protected health information under HIPAA: results and records a practice handles through myDxHub, which we hold as that practice’s business associate. HIPAA and the practice’s own notice govern that information. Information you add yourself, such as the vitals and activity your phone reads from its health store, is consumer health data that this policy covers, and switching it on for a practice does not change that. Our Privacy Policy covers the rest of what we hold, such as your account.

• Vitals and activity from your phone’s health store, if you connect it in the myDxHub app: heart rate, resting heart rate, heart rate variability, blood oxygen, blood pressure, weight, blood glucose meter readings, sleep and steps. It does not read continuous glucose monitors. Only the kinds you allow are read. With each value we keep the app or device that recorded it and the day.
• Records you add: documents, images, lab reports and other files you upload, prescriptions you enter, and corrections you ask for.
• Records from a health system you connect, such as conditions, immunizations, results and documents, read from that system’s patient portal with your sign-in.
• Records from your practices and their laboratories: results, reports and images they add to your record.
• Information that reveals your care: which practices and providers you are connected to, who you share with, and who has opened your record.

We collect and use it only to:

• keep it in your own record and show it to you, as recorded;
• share it with the practices and people you choose;
• answer your requests, including downloads and deletion;
• secure the service, which includes recording who opened what; and
• meet our legal obligations.

myDxHub shows vitals and activity as recorded and does not evaluate them, compare them to clinical ranges, diagnose, or send alerts. It is not a medical monitoring or emergency service.

• You, on the website or in the app.
• Your phone’s health store, Apple Health on iPhone or Health Connect on Android, and the watches, rings, cuffs, scales, meters and apps that save to it. The app reads it only while open, makes a daily summary of each kind on your phone, and sends the summaries to your record. It never writes anything back.
• Health systems whose patient portal you connect.
• Practices and providers you are connected to, and the laboratories they use.
• A parent, guardian or other person you have allowed to act for you.

• Practices and providers you choose. Your care team sees the records you allow them to see. Vitals and activity are off for every practice until you switch one on, and then that practice sees all the kinds in your record, including summaries already there.
• People you send something to, when you email a report or share a link.
• Service providers that run myDxHub for us, under contracts that limit them to doing so: Amazon Web Services (hosting, storage, sign-in and email delivery) and Google Workspace (the email you send to our support and privacy addresses). Cloudflare checks that a person is signing up and receives no health information.
• When the law requires it, in response to valid legal process.

We have no affiliates with whom we share consumer health data. We do not sell it, use it for advertising, or share it for anyone else’s marketing, and we do not use location to target anyone near a healthcare facility.

We ask before collecting, and separately before sharing. The app asks before it reads your phone’s health store, naming what it reads, why, and how to stop. Switching vitals on for a practice asks again, naming the practice and what it will see. We record each answer with the date and the exact wording you saw.

You can withdraw either at any time. Stop reading in the app’s Vitals and activity screen; switch a practice off under Vitals and activity in your record. Withdrawing stops collection or sharing from then on. It does not undo what a practice has already seen, and it does not change what is in your phone’s health store.

You can:

• See it. Download a complete copy of your records, including the consents you gave, from Privacy & Access. The same page lists every practice and provider with access and everyone who opened your record. Ask us at privacy@mydxhub.com for the list of every third party we have shared your consumer health data with, and how to contact them.
• Withdraw consent, as described above.
• Delete it. In the app, stop reading from your phone’s health store and choose to remove what was collected. Or close your account, in Settings on the website or Account in the app. Or email privacy@mydxhub.com to delete something specific. When we delete, we also tell our service providers to delete their copies.

We confirm a request comes from you through your signed-in account or the email address on it. We answer within 45 days. If we need longer, we tell you why within those 45 days and take no more than 45 more. Requests are free, up to twice a year. A parent, guardian or other person allowed to act for you can make a request for you.

If we decline a request, we tell you why. You can appeal by emailing privacy@mydxhub.com with “Appeal” in the subject within 45 days of our answer. We review the decision again and answer in writing within 45 days, explaining what we decided and why. If you are in Washington and disagree with the result, you can contact the Washington State Attorney General.

We keep your health information for as long as you have an account. When you delete something or close your account, we remove it from myDxHub within 30 days. Database backups, kept so a failure can be recovered from, roll over within 7 days. A single file you remove while your account stays open keeps an earlier version for 90 days, so a mistake can be undone.

We keep a record of who opened your records, and when, for six years, because health privacy rules require it. That record and our security logs hold who did what and when, not your measurements or results. A practice that copied your information into its own systems keeps that copy under its own obligations; questions about it go to the practice.

Your information is encrypted while stored and while moving, only the people you allow can open it, the database itself enforces who can see what, and every opening is recorded. Our security page explains how.

We update the date at the top when this policy changes. Before collecting a new kind of health information, using it for a new purpose, or sharing it in a new way, we tell you and ask for your consent.

Email privacy@mydxhub.com with any question about this policy or your consumer health data. We will never treat you differently for asking or for using these rights.