top of page

HIPAA Notice of Privacy Practices
 

Effective Date: August 23, 2026
 

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
 

1. Our Legal Duty & Commitment

OpenDoor Health is required by federal law, including the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act, to:

  • Maintain the privacy and security of your Protected Health Information (“PHI”).

  • Provide you with this Notice detailing our legal duties and privacy practices regarding your PHI.

  • Notify you promptly in the event of a breach of your unsecured PHI.

  • Follow the terms of the Notice currently in effect.
     

2. How We May Use & Disclose Your PHI

We use and disclose PHI for treatment, payment, and healthcare operations without needing your written authorization in the following ways:

  • For Treatment: We use your PHI to provide, coordinate, or manage your healthcare services via our telehealth platform. This includes synchronous video visits, asynchronous clinical reviews, electronic prescribing to your pharmacy, lab orders, and consulting with other health professionals involved in your care.

  • For Payment: We use and disclose PHI to bill and collect payment from you, your health insurance plan, or third-party payers for the services provided.

  • For Healthcare Operations: We use PHI to run our clinical practice, evaluate the quality of care you receive, perform risk management, conduct credentialing, and improve our digital clinical workflows.
     

3. Telehealth & Electronic Communications

Because OpenDoor Health operates primarily via digital and telehealth modalities, specific protections apply to how your electronic PHI (ePHI) is handled:

  • Secure Telehealth Technology: All video visits, patient portal messaging, and asynchronous intake submissions are transmitted using encrypted, HIPAA-compliant technologies.

  • Text & Email Communications: Unencrypted email and standard SMS text messages are inherently unsecure. We will only send clinical updates or PHI via standard text/email if you have provided explicit consent. Account notifications or appointment reminders sent via standard text will contain minimal details.

  • Business Associates: We partner with HIPAA-compliant third-party technology providers (e.g., electronic medical records, secure communication tools, e-prescribing tools). Each vendor executes a Business Associate Agreement (BAA) requiring them to safeguard your PHI under the same standards we maintain.
     

4. Permitted & Required Disclosures Without Authorization

Under federal and state laws, we may or must disclose your PHI without your authorization in certain situations:

  • Public Health & Safety: To public health authorities for disease prevention, reporting adverse drug reactions, or preventing a serious and imminent threat to health or safety.

  • Legal Requirements & Law Enforcement: In response to court orders, subpoenas, warrants, or other lawful legal processes.

  • Health Oversight: To government agencies for audits, investigations, licensure reviews, or inspections.

  • Specialized Government Functions: As required for military activity, national security, or protective services.
     

5. Uses & Disclosures Requiring Your Written Authorization

For matters not covered above, we will obtain your written authorization before using or disclosing your PHI. Specifically, we will never:

  • Sell your PHI or personal data to third parties.

  • Use or disclose your PHI for marketing purposes without your explicit consent.

  • Share psychotherapy notes (if applicable) without your explicit authorization.

You may revoke any written authorization at any time in writing, except to the extent that we have already acted based on it.


6. Your Rights Regarding Your PHI

You have the following rights concerning your medical information:

  • Right to Inspect and Copy: You have the right to request access to and receive an electronic copy of your health records. We will provide your records in the electronic format requested if readily producible.

  • Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI for treatment, payment, or operations. While we will consider all requests, we are not required to agree, except if you pay for a service entirely out-of-pocket and request that we not notify your health plan.

  • Right to Confidential Communications: You may request that we communicate with you via a specific method (e.g., portal messaging only) or at an alternate address or phone number.

  • Right to Amend: If you feel the PHI in your record is incorrect or incomplete, you may request an amendment in writing detailing the reason for the change.

  • Right to an Accounting of Disclosures: You may request a list (accounting) of certain disclosures of your PHI made by us during the past six years.

  • Right to a Paper or Electronic Copy: You have the right to request a copy of this Notice at any time.


7. Changes to This Notice

We reserve the right to change the terms of this Notice at any time. The revised Notice will apply to all PHI we maintain. Updated versions will be made available on our portal and website at www.opendoorhealth.co.


8. Questions & Complaints

If you believe your privacy rights have been violated, or if you have questions about this Notice, you may contact us or file a formal complaint:

  • Contact OpenDoor Health Privacy Officer:

Email: info@opendoorhealth.co

Website: www.opendoorhealth.co

  • File a Complaint with the U.S. Department of Health and Human Services (HHS):

You may submit a written complaint to the Office for Civil Rights at the U.S. Department of Health and Human Services by visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.

We will not retaliate or take any adverse action against you for filing a complaint.
 

9. Acknowledgement Confirming Receipt of HIPAA Privacy Notice

I acknowledge I have received a copy of the HIPAA Privacy Notice.

bottom of page