IngagePatient is dedicated to protecting the privacy of the users of any of our products or services and of the individuals whose health information is stored or transmitted by IngagePatient.
IngagePatient’s patient engagement platform (IngagePatient) was developed for the highest levels of security and performance. Our world-class data center is equipped with best-in-class technology to securely house sensitive data.
Users Personal Information
We understand the importance of protecting users from the unauthorized use of information provided in the course of doing business with IngagePatient. Except as disclosed in this policy or our User Agreement, IngagePatient will not give away, sell or otherwise disclose any information that personally identifies you. We may, however, obtain, use and disclose personal information about users for the purpose of verifying their identity and practice credentials, and we may provide personal information to payers with which patients contract to provide health care services. We may also disclose personal information about patients if we are compelled to do so by law or by valid legal process. We may also disclose personal information if we have the patients express permission to do so, or the disclosure is to our service providers to assist us in providing our services, or for user verification purposes. We also use IP addresses to analyze trends, administer the site and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information.
IngagePatient has the right to remove personal identifiers from patient personal information, so that it cannot reasonably be used to identify the actual patient. In the User Agreement, patients transfer and assign to us all right, title and interest in and to all such de-identified personal information, and you agree that we may use, disclose, market, license and sell such de-Identified personal information for any purpose without restriction, and that you have no interest in such de-identified personal information, or in the proceeds of any sale, license, or other commercialization thereof.
Protected Health Information
The IngagePatient User Agreement sets forth obligations as our users’ business associate under the administrative simplification provisions of the Health Insurance Portability and Accountability Act of 1996 and its privacy and security regulations (HIPAA), and under the privacy and security provisions of the Technology for Economic and Clinical Health Act of 2009 (the HITECH Act). IngagePatient will comply with the business associate provisions of our User Agreement and with provisions of the HIPAA Security Rule that apply to business associates under the HITECH Act, and the privacy and security provisions of the HITECH Act that are applicable to business associates.
Permitted Uses of Protected Health Information
The User Agreement sets forth the ways in which we may use or disclose protected health information we receive from you, or create or receive on patient behalf. Among other permitted uses, we may allow access to patient health information to you and patient workforce for whatever purpose you require it.
Allow access to patient health information by other health care providers and their business associates for treatment. This includes disclosing health information for related applications that you select, such as clinical laboratory reporting, billing and e-prescribing, as well as to other health care providers to whom you agree to give access to patient protected health information for treatment. You agree to be bound by the terms of any licensing and other agreements relating to such third-party products and services.
Allow access to health information to patient patients through our Patient portal.
De-identify patient health information. In the User Agreement, you transfer and assign to us all right, title and interest in and to all de-identified information that we make from patient health information, and you agree that we may use, disclose, market, license and sell such de-Identified information for any purpose without restriction, and that you have no interest in such de-identified information, or in the proceeds of any sale, license, or other commercialization thereof. We will, however, maintain the confidentiality and security of the original health information as required by the User Agreement.
Create limited data sets from patient health information, and disclose them for any purpose for which you may disclose a limited data set. In the User Agreement you authorize us to enter into data use agreements on patient behalf for the use of limited data sets, in accordance with applicable state and federal law and regulation.
Aggregate patient health information with that of other users, and share aggregated information in accordance with applicable state and federal law.
Use patient health information for the proper management and administration of IngagePatient business, and to carry out our legal responsibilities. We may also disclose patient health information for these purposes if the disclosure is required by law, or we obtain reasonable assurances from the recipient that the information will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the recipient, and the recipient notifies us of any instances of which the User is aware in which the confidentiality of the information has been breached. For example, we may permit access to the system by our contracted system developers under appropriate confidentiality agreements.
IngagePatient reserves the right to make any other uses of patient health information permitted to a Business Associate, as described from time to time in our policies and procedures. However, except as permitted by the Privacy Rule, we will not use or disclose patient health information in any manner that would violate the Privacy Rule if done by you or patient business associate.
Patients and Providers agree that they will use other persons’ information available on or through this site (whether or not protected health information) strictly in accordance with applicable laws and regulations, and you will ensure that others under patient control who have access to such information also comply with applicable laws and regulations. Practices are solely responsible for obtaining and maintaining all patient consents and authorizations necessary for patient use of the site and the systems to which it provides access.
To access patient account, Practices must provide the identifier created by IngagePatient. With this information, IngagePatient can verify patient identity and permit Practices to view data in our system. IngagePatient logs and audits system use in order to ensure that users are using the system appropriately. If we have questions about patient use of the system, we may contact the client. IngagePatient may also disclose patient identity to others to assist in the investigation of suspected misuse of our systems, and otherwise to ensure the proper operation of our systems.
Surveys, Questionnaires and Polls
IngagePatient may ask patients or practcies to participate in use surveys, questionnaires or polls to facilitate feedback and input from our users. When you respond to surveys, questionnaires or polls related to our site, this information is collected only as anonymous, aggregated information and is used for statistical purposes.
IngagePatient collects the limited information that patient browser makes available whenever you visit any website. Additionally, IngagePatient may place Internet “cookies” on the computer hard drives of visitors to this website. Information we obtain from cookies helps us to tailor our site to be more helpful and efficient for our visitors. The cookie consists of a unique identifier that does not contain information about you or patient health history. We use two types of cookies, “session” cookies and “persistent” cookies.
A session cookie is temporary, and expires after you end a session and close patient web browser. We use session cookies to help customize patient experience on our site, and maintain patient signed-on status as you navigate through the features.
Persistent cookies remain on patient hard drive after you’ve exited from our site, until you erase them or they expire. Persistent cookies will not contain any personal information about you.
Marketing Products and Services
IngagePatient may place advertisements concerning the products and services of third parties on the interface to our services, so that patients see them when you use the services. We may receive remuneration from the suppliers of these products and services for placing their advertisements. We may use computerized processes to tailor the advertisements to you or to patient use of the system. However, except as described above, we will not use or disclose to any third party any information that identifies you to enable the third party to market products or services to you directly.
Portions of this site require a valid user name, e-mail address, code or password (or a combination of the foregoing) to access and use services or materials on the site. Pratices and patients are solely responsible for (1) maintaining the strict confidentiality of any user name, e-mail address, code or password (collectively, “User IDs”) assigned to you, (2) not allowing another person to use patient User IDs to access the site, (3) any damages or losses that may be incurred or suffered as a result of patient failure to maintain the strict confidentiality of patient User IDs, and (4) promptly informing IngagePatient in writing of any need to deactivate a User ID due to potential or actual security breaches. IngagePatient is not liable for any harm related to the theft of patient IDs, patient disclosure of patient User IDs, or patient authorization to allow another person or entity to access and use the site using patient User IDs. You agree to immediately notify IngagePatient in writing of any unauthorized use of any of patient User IDs.
IngagePatient may offer forums for the exchange of information among our users. Practices agree to assume all responsibility for patient use of such forums. In particular, practices understand that IngagePatient does not assure the accuracy, reliability, confidentiality or security of information made available through the use of our forums. You agree not to disclose individually identifiable health information through our forums.
IngagePatient may provide information to assist patients in clinical decision-making. This may include information and reminders concerning drug interactions, allergies, dosages, as well as general health-care related information and resources. IngagePatient may also provide forums for users to exchange information. The information and materials available through this site are for informational and educational purposes only and are not intended to constitute professional advice, diagnosis or treatment, or to substitute for patient professional judgment. Information may be placed on this site by IngagePatient and by third parties beyond the control of IngagePatient. IngagePatient is not responsible for the accuracy or completeness of information available from or through this site. You are not permitted to use this site to advise, diagnose, or otherwise treat users of this site. You assume full risk and responsibility for the use of information you obtain from or through this site, and you agree that IngagePatient, Inc. is not responsible or liable for any claim, loss, or liability arising from the use of the information. IngagePatient does not recommend or endorse any provider of health care or health-related products, items or services, and the appearance of materials on this site relating to any such products, items or services is not an endorsement or recommendation of them.
Clients may provide content or material to this site by participating in forums, discussion groups and the like, or by using the site to create custom templates and the like. Clients agree that any information, material or work product you provide to this site, other than protected health information that identifies a patient or personal information that identifies you, is the exclusive property of IngagePatient, Inc., and by submitting such content or material you assign to IngagePatient, Inc., all intellectual property rights in such content or material. Furthermore, you agree that IngagePatient may use, disclose, market, license and sell such material or content, and that you have no interest in the information, or in the proceeds of any sale, license, or other commercialization thereof. You warrant and agree that any material you provide will not infringe on the intellectual property or other rights of others, and will not be otherwise unlawful, infringing, threatening, libelous, defamatory, obscene, pornographic, or in violation of any law. You should bear in mind that any information you post in a forum or discussion group is available to the public, and may result in patient receiving communications from others outside this site. Clients are responsible for safeguarding the privacy of patient and patient patients’ personal information when you participate in forums, discussion groups and the like.
Links to Other Materials
This site provides links to sites operated by third parties. IngagePatient, Inc. has no control over the content of such linked sites, and is not responsible for it, or for the effect of patient accessing a site through a link on our site. You should assume that any information that does not bear the IngagePatient logo is operated by a third party, and you should read the site’s privacy notice before using it.
Any claim relating to the use of this site or the systems or information to which it gives access shall be governed by the internal substantive laws of the State of Florida.
Questions, Complaints and Contacts
If you have any questions about this Privacy Statement, our policies and practice, patient rights under this statement, and patient dealings with the IngagePatient, send an email to support@IngagePatient, or by U.S. mail at the address below:
201 SE 2nd Place, Suite 211
Gainesville, FL 32601