Privacy Policy

Effective November 1st, 2024

1. Introduction – This Privacy Policy outlines how DisclosedRx, a remote Pharmacy Benefit Manager, collects, uses, and discloses your Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA).

2. Definitions

• Protected Health Information (PHI): This refers to any information about health status, provision of health care, or payment for health care that can be linked to a specific individual.
• Electronic Protected Health Information (ePHI): This is any PHI that is created, stored, transmitted, or received electronically.

3. HIPAA Compliance – DisclosedRx is committed to complying with all HIPAA regulations. As a Pharmacy Benefit Manager, we qualify as a HIPAA covered entity and are therefore required to adhere to HIPAA’s Privacy Rule, Security Rule, and Breach Notification Rule.

4. Information We Collect – We collect various types of information, including PHI and ePHI, to provide our services. This may include your name, address, date of birth, insurance information, and medical information.

5. How We Use Your Information – We use the collected information to manage your pharmacy benefits, process your prescriptions, and provide other health-related services. We ensure that all uses of your information are compliant with HIPAA regulations.

6. Information Disclosure – We may disclose your information to your health care providers, your health plan, or other entities as required by law or as necessary to provide our services. We will always ensure that any disclosure is compliant with HIPAA regulations.

7. Rights of the Individuals – Under HIPAA, you have the right to access your PHI, request corrections to your PHI, and request restrictions on how your PHI is used and disclosed. You also have the right to receive a notice of any breach of your unsecured PHI.

8. Security Measures – We have implemented administrative, physical, and technical safeguards to protect your PHI and ePHI, in compliance with the HIPAA Security Rule. These safeguards include secure data storage, encryption, and regular security audits. We also provide audio-only telehealth consistent with the requirements of the HIPAA Privacy, Security, and Breach Notification Rules.

9. Breach Notification – In the event of a breach of unsecured PHI, we will notify you and the Department of Health and Human Services (HHS) as required by the HIPAA Breach Notification Rule. This notification will include the nature of the breach, the types of information involved, the steps you should take to protect yourself from potential harm, and what we are doing to investigate the breach, mitigate the harm, and prevent future breaches.

10. DisclosedRx maintains strict privacy policies, ensuring that personal information and mobile information of our users and members is not shared, sold, rented, released, or traded to third parties for marketing and promotional purposes.

11. SMS Opt-Out: If you are receiving text messages from us and wish to stop receiving them, simply respond with “STOP” to the number from which you received the message. Once we receive your message, you will no longer receive further text messages from us.

12. Changes to This Policy – We reserve the right to change this policy at any time. We will notify you of any changes by posting the new policy on our website and updating the “effective date” at the top of this policy.

13. Contact Information – If you have any questions or concerns about this privacy policy or our privacy practices, please contact us at 1.888.589.3340 or email us at info@disclosedrx.com