Notice of privacy practices

• Treatment: to provide your care and share it with other people caring for you, such as your pharmacy or lab
• Payment: to bill and collect for your care, for example from a group that sponsors your plan
• Health care operations: to run CheckMD, check quality and train staff
• When the law requires or allows it: public health, health oversight, legal proceedings, law enforcement, preventing a serious threat to health or safety, and workers' compensation

For anything else – including marketing – we need your written permission, which you can withdraw at any time. We never sell your health information.

• Get a copy of your medical record, usually within 30 days
• Ask us to correct your record
• Ask us to contact you in a particular way or at a different address
• Ask us to limit what we use or share (we will consider it, and must agree if you paid in full out of pocket and ask us not to share with your health plan)
• Get a list of those we shared your information with
• Get a paper copy of this notice
• Choose someone to act for you, such as a legal guardian

We are required by law to keep your health information private, to give you this notice, to follow it, and to tell you promptly if a breach may have put your information at risk. We may change this notice; the new version will apply to all information we have and will be posted here.

Contact our privacy officer at [email protected]. You can also complain to the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/complaints. We will never retaliate against you for filing a complaint. Effective date: October 18, 2026.