Privacy of Your Health Care Information
Privacy Policy
This myTuftsMed Mobile Application Privacy Policy (“Privacy Policy”) applies to personal information obtained through the myTuftsMed, myTuftsMed Mobile Application (the “App”), which is operated by Tufts Medicine, Inc. and its affiliates (“Tufts Medicine”, “we”, “us”, “our”). This Privacy Policy explains our practices and governs the use of personal information we collect from you or about you through the App. If you do not agree with our policies and practices, do not download, register with, or use this App. By downloading, registering with, or using this App, you agree to this Privacy Policy.
Please note that this App is hosted through a service provider, Epic Systems Corporation, which processes patient information not collected through the App, such as information collected through your electronic medical record at your doctor’s office. Such patient information may be viewable through the App and may be considered protected health information, as governed by the Health Insurance Portability and Accountability Act (“HIPAA”) and applicable state law. Please refer to our Notice of Privacy Practices which include documents that govern as to protected health information in the event of a conflict with this Privacy Policy.
Information We Collect
- We, and our vendors, may obtain personal information that you provide to us directly such as data you submit when you complete forms, fill out surveys, schedule appointments, request prescription refills, send messages to your care team, or make payments through the App. Personal information we, and our vendors, collect may include your name, account credentials, residential address, email address, phone number, gender identity, sexual orientation, marital status, race, ethnicity, language, religion, emergency contacts, caregiver information, scheduling preferences, photo, insurance coverage information (including insurance card photos, claims, and referrals), pharmacy information, certain health-related information, financial or social assistance-related information, and payment processing information;
- If you submit the personal information of another person, you represent that you have obtained the authorization from that person to submit such personal information to us. If you access your myTuftsMed account through a browser (at https://mychart-p.well-net.org/MyChartprd), information collected through the App related to your App account and settings may not be synchronized between the App and the browser. Because the App is hosted through a service provider, Epic Systems Corporation, which processes patient information not collected through the App, there may be certain additional personal information that you may be able to view through the App. For example, you may view lab test results, notes from your health care provider after a clinic or video visit, prescription information and instructions, allergies, and immunizations. This personal information is not collected through the App. Rather, the information is collected through your electronic medical record at your doctor’s office and may be considered protected health information under HIPAA.
- We or our vendors may use a variety of tracking technologies that automatically collect certain information whenever you interact with the App. This may include usage details related to your access to and use of the App, including traffic data, location data, logs, crash analytics, and/or other communication data and the resources that you access and use on or through the App, as well as device information such as internet connection information, the device's unique device identifier, IP address, geolocation (to the extent it is not restricted by your App permissions), operating system, browser type, and mobile network information
- The App may be personalized based on various information we may have about you to provide you with more location-relevant content. To the extent it is not restricted by your App permissions, we may use GPS (global positioning systems) software, geo filtering, and other location-aware technologies to locate you, sometimes precisely, for purposes such as verifying your location and delivering or restricting content based on your location. You may use your device settings to change your geolocation preferences.
- myTuftsMed may interact with your sensitive data to provide certain features, such as video visits or mobile appointment check-in. The first time you try to use any of these features, we will ask for your consent within the app and will only allow you to use a feature if you give consent. You do not have to provide consent if you do not want to allow myTuftsMed to interact with your data as requested. myTuftsMed is developed by Epic Systems Corporation; please refer to Epic’s Mobile Application Privacy Policy for Patients for more detailed information about the limited ways they may interact with your information to make your use of myTuftsMed possible.
- myTuftsMed may offer location-based check-in for in-person appointments or allow you to find healthcare providers near you. The first time you try to use any features that use your location, we will ask for your consent within the app and will only access your location if you give consent. You do not have to provide consent if you do not want to allow myTuftsMed to use your location. We do not store your location data.
- We may combine certain automatically-collected information with other information we obtain about you, which may include data we obtain from third parties. We or third parties, including our vendors, may collect personal information about your online activities over time and across different online services when you use the App.
App Permissions
- Location (we may include precise or approximate location, including access to location in the background in case patients seek assistance in locating services)
- Storage (the App may be able to read, modify, or delete the contents of your shared storage)
- Camera (may allow the App to take pictures and videos)
- Microphone (may record audio)
- Phone (may directly call phone numbers)
- Other Information (for example, the App may be able to run foreground service, access Bluetooth settings and pair with Bluetooth devices, control vibration, run at startup, have full network access, use device security hardware such as fingerprint login, view network connections, prevent phone from sleeping, change audio settings, and receive data from Internet)
- These App permission settings allow you to access or use certain features within the App. By changing your App permission settings, you may affect your ability to access or use certain features on the App.
- Additionally, you may be able to log into the App using your device’s security features such as using a passcode or your fingerprint. These device log in features are facilitated through your device and not Tufts Medicine and we have no control over such features, which you can change by accessing your device settings and preferences.
Depending on your device or App permission settings, the App may have access to the following information from your device:
How We Use Your Information
We use your information for many purposes, such as to:
- Provide you with various products and services, including the App and its contents, and payment processing.
- Fulfill the purpose for which you provide your information.
- Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
- Notify you when App updates are available, and of changes to any products or services we offer or provide though it.
- Improve our App and to deliver a better and more personalized experience by enabling us to estimate our audience size and usage patterns, store information about your preferences, customize our App according to your individual interests, speed up your searches, recognize you when you use the App.
- Analyze trends and conduct research about improving our products and services.
- Provide customer service, including responding to questions from customers and App users.
- Contact users for research, informational, and marketing purposes and provide specific relevant marketing, promotional, or other information to you.
- Correlate information with other commercially available information to identify demographics and preferences to assist us in our marketing efforts.
- Address information security and/or privacy issues, network functioning, and troubleshooting.
- Investigate claims and/or legal actions, violations of our policies and procedures, and compliance with relevant applicable laws and legal process.
- Comply with applicable laws, regulations, or legal process as well as industry standards and our company policies.
- Prevent, investigate, identify, or take any other action with regard to suspected or actual fraudulent or illegal activity, or any activity that violates our policies.
- We will store your personal information for no longer than is necessary for the performance of our obligations or to achieve the purposes for which the information was collected, or as may be permitted under applicable law.
Disclosure of Your Information
We may disclose information:
- To our subsidiaries and affiliates.
- To contractors, service providers, and other vendors to help us operate our business and the App, or administer activities on our behalf, such as App maintenance, and payment processing.
- To others, at your direction. For example, you may share your information with friends, family, other individuals, or other healthcare organizations. You may adjust your sharing preferences through the sharing features. Note that if you choose to provide access to your information to friends or family through the App proxy access feature, they may obtain full access to all the information you have access to yourself on the App. If you choose to provide access to any individual (e.g., nurse, social worker), those individuals may view a subsection of your information. You may also choose to link your myTuftsMed account to other healthcare system accounts.
- In the event we sell or transfer all or a portion of our business assets (e.g., further to a merger, reorganization, liquidation, or any other business transaction), including negotiations of such transactions. To others with your consent.
- In some cases, to other devices or applications as per your preferences. You have the ability to review which devices or apps have access to your information. Connecting to other devices or applications, may entail sharing information between the App and such devices related to the device’s technologies or features.
- As permitted by law; (ii) where we determine that disclosure of specific information is necessary to comply with the request of a law enforcement or regulatory agency or other legal process; or (iii) to enforce our policies, or to protect legal rights, property, or safety.
- From time to time we may enter into an arrangement with another company that is not owned by or affiliated with us to provide additional features on the App. These arrangements may include business partners, sponsors, and co-branded online services (referred to here as “co-branded services”). Any information, including personal information, that you provide on one of these co-branded services may be shared with these partners. By participating in activities or providing your information on these co-branded services, you consent to our providing your information to those partners. Separate privacy policies may apply to these partners’ uses of your personal information.
- Note that this App is hosted through a service provider, Epic Systems Corporation, which processes patient information not collected through the App such as information collected through your electronic medical record at your doctor’s office. Personal information submitted to the App, such as your communications with your health providers, may be shared with Epic Systems Corporation and added to your medical record. Once part of your medical record, this personal information but may be considered protected health information, as governed by HIPAA and applicable state law.
External Links and Features
The App may contain links to, or features facilitated by, other online services. We are not responsible for the privacy practices, advertising, products, or content of online services that Tufts Medicine does not control. Please note that other online services have their own privacy policies and Tufts Medicine is not responsible or liable for these policies.
Your Choices
- If you have a registered account with the App, you may log in and update certain preferences, account settings, or personal information details. You may also download and send records accessible through the App or change sharing and device/app access preferences. You can also manage communications that you receive from us, including the method of communication (e.g., emails, phone calls, texts). Additionally, you may download and view certain records as well as information on who (i.e., third-party apps and other Tufts Medicine App users) has accessed your Tufts Medicine App records through the App.
- You may also use your device settings to change your geolocation and other App permissions preferences. If you use access your Tufts Medicine myTuftsMed account through a browser (at https://mychart-p.well-net.org/MyChartprd/), information collected through the App related to your App account and settings may not be synchronized between the App and the browser.
- With your permission, certain versions of our App can connect to Apple HealthKit or Google Fit to receive health information and to share that information with your healthcare providers.
- Note that because the App is hosted through a service provider, Epic Systems Corporation, which processes patient information not collected through the App, there may be certain personal information that you may be able to view through the App, but you are not able to revise. This information is collected through your electronic medical record at your doctor’s office and may be protected health information, which you may view through the App. Please refer to our Notice of Privacy Practices for more information. If there is personal information on the App that the App does not allow you to revise, it may be that the information is personal information collected through your electronic medical record at your doctor’s office. If any of the information contained in your record is inaccurate, please contact your healthcare provider. Note that in some cases, patient information not collected through the App may not be viewable through the App. If you do not see an expected test result, please contact your physician's office to request that these results be released to your App account. If at any time in the future we offer to send marketing materials, you elect to receive marketing materials from us, and prefer to no longer receive any marketing materials from us, you may opt out at any time by using the unsubscribe link located in our emails.
Data Security
- We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Where we have given you (or where you have chosen) a password for access to certain parts of our App, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. Unfortunately, the transmission of information via the internet and mobile platforms is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through our App. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we provide.
This Privacy Policy may change from time to time. If we make changes, we will notify you by revising the date at the top of this Privacy Policy. Your continued use of this App after we revise this Privacy Policy means you accept those changes, so please check this Privacy Policy periodically for updates.
For further information about this policy, or if you believe we have not followed this policy, contact the Privacy Office at compliance@tuftsmedicine.org