Legal
This notice describes how your medical information may be used and disclosed and how you can get access to this information.
We collect protected health information (PHI) that you provide directly — including your name, contact details, date of birth, medical history, symptoms, lab results, and treatment preferences. We also collect information generated during your care, such as visit notes, prescriptions, care plans, and messages between you and your providers.
We use your health information to deliver care, coordinate with your providers, process payments, and improve our platform. This includes facilitating telehealth visits, sending appointment reminders, enabling secure messaging, and conducting internal quality reviews. We only share information with providers you explicitly choose to work with.
Verdana Health maintains administrative, physical, and technical safeguards that meet or exceed HIPAA Security Rule requirements. All data is encrypted in transit and at rest using industry-standard protocols. Access to PHI is restricted to authorized personnel and providers with a legitimate need, and all access is logged and audited regularly.
You have the right to access, amend, and receive an accounting of disclosures of your health information. You may request restrictions on certain uses and disclosures, and you have the right to receive confidential communications by alternative means. You also have the right to file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.
We retain your health information for the period required by applicable law and professional standards — typically seven years for adult records. You may request deletion of your account and associated data at any time; however, certain health records may be retained as required by law even after account closure.
If you have questions about this notice or wish to exercise your privacy rights, please contact our Privacy Officer.
privacy@verdanahealth.co