Last Updated: April 11, 2022
This Privacy Policy (this “Privacy Policy”) explains how First Opinion Services, Inc. and its affiliates (“Curai Health”, “we”, “us” or “our”) collect, use and share information about you when you access or use our website (“the Website”) and the mobile applications (“Apps,” and together with the Website, the “Services”)
This Privacy Policy is not a contract, and does not create any contractual rights or obligations.
We reserve the right to change this Privacy Policy from time to time in our sole discretion. If we make changes to this Privacy Policy, we will provide notice of such changes by updating the “Last Updated” date at the beginning of this Privacy Policy and may provide notice by sending an email notification or providing notice through the Services. We encourage you to review this Privacy Policy whenever you use or access the website or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy.
A Note About Protected Health Information
[If you use the Services as a recipient of health care services from participating health care providers, we will protect individually identifiable health information in accordance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) (“Protected Health Information”)]. The types of Protected Health Information we may collect includes your demographic and contact information, medical history, health-related behaviors, your informational exchanges with participating health care providers and their responses, suggestions, and guidance, and interactions with our digital services. Protected health information may also include the information that you have consented to share about you and your health by linking other apps, devices, or services—such as the Apple HealthKit, fitness trackers, or other health-appliances—to our Services.
This Policy does not govern our use of disclosure of Protected Health Information, which is covered by our HIPAA Notice of Privacy Practices. For clarity, the HIPAA Notice of Privacy Practices, not this Privacy Policy, explains how we use and disclose your Protected Health Information.
Collection of Information
Information You Provide
We collect information you provide directly to us. For example, we collect information when you register for an account, participate in any interactive features of the Services, subscribe to a newsletter or email list, participate in a survey, contest, promotion or event, request customer support or otherwise communicate with us.
The types of information we may collect from you include:
Information We Collect Automatically
When you access or use the Services, the types of information we may automatically collect about you include:
Information We Collect From Third Parties
We may receive information other people provide us, which may include information about you, in connection with one or more business purposes.
Use of Information
We may use your information for various purposes related to our operations and your use of the Services. For example, Curai Health may use your information to:
We also may use aggregated or de-identified information, which cannot reasonably be used to identify you. Once de-identified and aggregated so that data does not personally identify you (for example, we may aggregate data in order to improve our automation and improve care), it is no longer personal information. Such de-identified and/or aggregated information which does not identify individuals is not subject to this Privacy Policy.
Sharing of Information
We may share information about you as follows or as otherwise described in this Privacy Policy:
We also may share aggregated or de-identified information, which cannot reasonably be used to identify you.
Third-Party Analytics
We partner with certain third-parties to collect, analyze, and use some of the information described above. For example, we may allow third parties to set cookies or use web beacons on the Services or in email communications from Curai Health. The information collected by third parties using these technologies may be used to engage in analysis and reporting. These third parties may set and access cookies on your computer or other device and may collect information about your online activities across different websites or services over time, including on websites and mobile applications that are not owned or operated by Curai Health. In particular, the Services may use Google Analytics to help collect and analyze certain information for the purposes discussed above. You may review Google Analytics’ security and privacy principles by clicking here and opt out of the use of cookies in web browsers by Google Analytics by clicking here.
How We Respond to “Do Not Track” Signals
Some web browsers have “Do Not Track” or similar features that allow you to tell each website you visit that you do not want your activities on that website tracked. At present, the Services do not respond to “Do Not Track” signals and consequently, the Services will continue to collect information about you even if your browser’s “Do Not Track” feature is activated.
Retention of Your Information
As a general matter, we will keep your personal information for as long as necessary to fulfill the purpose for which it was collected. If a law requires us to retain your information for a longer period of time, we will comply with that law. We will also retain your personal information as necessary to protect our legal rights.
Security
Curai Health takes reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Please understand, however, that no security system is impenetrable. We cannot guarantee the security of our databases, nor can we guarantee that the information you supply will not be intercepted while being transmitted to or from us over the Internet. In particular, email sent to or from the Services may not be secure, and you should therefore take special care in deciding what information you send to us via email.
Third-Party Websites
You may click on links on our Services to access other websites that do not operate under this Privacy Policy. These third-party websites may independently solicit and collect information, including health information, from you and, in some instances, provide us with information about your activities on those websites. We recommend that you consult the privacy policies of all third-party websites you visit. Any access to and use of such third-party websites is not governed by this Privacy Policy, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.
Your Choices
Reviewing, Correcting, and Deleting Your Personal Information
You may access, correct, and/or request deletion of certain information that you have provided to us by contacting us through the Services, or by emailing us at support@curaihealth.com. If you email us, for your protection, we may only implement requests with respect to the information associated with the particular email address you use to send us your request, and we may need to verify your identity before implementing your request. We will attempt to comply with any reasonable requests for accessing, correcting, or deleting your information; however we may be unable to accommodate your request under certain circumstances, such as if we need to retain your information, including Protected Health Information that is subject to our Notice of Privacy Practices, to comply with our legal obligations.
While we may be unable to delete certain pieces of information from your medical record, at your request, we can de-activate your secure account so that you and others can no longer access it with your username and password.
Location Information
With your consent, we may collect information about your actual location when you use our Apps. You may stop the collection of this information at any time by changing the settings on your mobile device, but note that some features of our Apps may no longer function if you do so.
Native Applications on Mobile Device
Some features of our Apps may require access to certain native applications on your mobile device, such as the camera, photo album and the address book applications. If you decide to use these features, we will ask you for your consent prior to accessing the applications and collecting associated information. Note that you can revoke your consent at any time by changing the settings on your device.
Cookies
Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of the Services.
Push Notifications
With your consent, we may send promotional and non-promotional push notifications or alerts to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device or within our Apps.
Children’s Privacy/Notice for Minors
We take seriously our obligations under applicable laws concerning the collection of information from children under 13. Our services are neither intended for nor directed at children under 13. If you believe a child under 13 has provided us with Personal Information, please contact us at privacy@curaihealth.com.
Additionally, if you are a California resident under 18 years old and a registered user, you can request that we remove content or information that you have posted to our website or other online services. If you would like to request removal of content or information, please contact us at privacy@curaihealth.com. Please note that the removal of content may not ensure complete or comprehensive removal of that content or information posted through the services.
Questions or Comments
If you have any questions or comments regarding this Privacy Policy, please email or mail us at:
Privacy Administrator, Curai Health
2443 Fillmore St. #380-15799, San Francisco, CA 94114
Last updated: March 22, 2023
First Opinion Health Services (FL) PLLC, First Opinion Health Services (IL), P.C., NY Medicine/Telemedicine, PLLC, First Opinion Health Services (NC), PLLC, First Opinion Health Services, Inc., First Opinion Health Services (TX), PLLC, First Opinion Health Services (GA), LLC, First Opinion Health Services NJ, LLC (“Curai Health”), its affiliated health care providers, or other members of your care team, including coaches (each, a “Provider”), may arrange for you to connect with Providers and/or provide you with professional services using asynchronous and/or synchronous telehealth technologies (“Telehealth Technology”). If you have questions about use of the Telehealth Technology itself and whether it is appropriate for your condition, the risks associated with using the Telehealth Technology, or the Provider’s credentials and professional background, please ask your Provider. In exchange for your use of the Telehealth Technology to receive care, you acknowledge and agree to the following terms and conditions of this informed consent (this "Consent"):
Privacy Consent
“Highly Confidential Information” means information about (a) substance use disorder treatment, (b) genetic information or test results, (c) mental health or illness or developmental or intellectual disability, (d) psychiatric treatment, (e) HIV/AIDS testing or treatment or status, (f) communicable or blood borne diseases, (g) sexually transmitted diseases, (h) child or domestic abuse and neglect, (i) abuse of an adult with a disability, (j) sexual assault, (k) maternity records (including medical records of new mothers and newborns), (l) infertility or fertility assistance, IVF, or artificial insemination, and (m) any other type of information that is given special privacy protection under state or federal laws.
Please refer to our Notice of Privacy Practices for more information.
You may revoke this consent at any time except to the extent that Curai Health has taken action in reliance on this consent. Unless you revoke your consent earlier, this consent will expire automatically when your participation in the app has ended.
Last updated: April 11, 2022
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
I. Who We Are
This Notice describes the privacy practices of each of the following distinct legal entities: [First Opinion Health Services (FL) PLLC, First Opinion Health Services (IL), P.C., NY Medicine/Telemedicine, PLLC, First Opinion Health Services (NC), PLLC, First Opinion Health Services, Inc., First Opinion Health Services (TX), PLLC, First Opinion Health Services (GA), LLC, First Opinion Health Services NJ, LLC] (each, as applicable, referred to as “we” or “us”), including:
II. Our Privacy Obligations
We understand that your health information is personal and we are committed to protecting your privacy. In addition, we are required by law to maintain the privacy of your Protected Health Information, to provide you with this Notice of our legal duties and privacy practices with respect to your Protected Health Information, and to notify you in the event of a breach of your unsecured Protected Health Information. When we use or disclose your Protected Health Information, we are required to abide by the terms of this Notice (or other notice in effect at the time of the use or disclosure).
III. Permissible Uses and Disclosures Without Your Written Authorization
In certain situations, which we will describe in Section IV below, we must obtain your written authorization in order to use and/or disclose your Protected Health Information. However, unless the Protected Health Information is Highly Confidential Information (as defined in Section IV.B below) and the applicable law regulating such information imposes special restrictions on us, we may use and disclose your Protected Health Information without your written authorization for the following purposes:
If you are not present for or unavailable prior to a disclosure (e.g., when we receive a telephone call from a family member or other caregiver), we may exercise our professional judgment to determine whether a disclosure is in your best interests. If we disclose information under such circumstances, we would disclose only information that is directly relevant to the person’s involvement with your care.
IV. Uses and Disclosures Requiring Your Written Authorization
For any purpose other than the ones described above in Section III, we only use or disclose your Protected Health Information when you give us your written authorization.
A. Marketing. We must obtain your written authorization prior to using your Protected Health Information for purposes that are marketing under the HIPAA privacy rules. For example, we will not accept any payments from other organizations or individuals in exchange for making communications to you about treatments, therapies, health care providers, settings of care, case management, care coordination, products or services unless you have given us your authorization to do so or the communication is permitted by law.
We may provide refill reminders or communicate with you about a drug or biologic that is currently prescribed to you so long as any payment we receive for making the communication is reasonably related to our cost of making the communication. In addition, we may market to you in a face-to-face encounter and give you promotional gifts of nominal value without obtaining your written authorization.
B. Sale of Protected Health Information. We will not make any disclosure of Protected Health Information that is a sale of Protected Health Information without your written authorization.
C. Uses and Disclosures of Your Highly Confidential Information. Federal and state law requires special privacy protections for certain health information about you (“Highly Confidential Information”), including Alcohol and Drug Abuse Treatment Program records and other health information that is given special privacy protection under state or federal laws other than HIPAA. However, in order for us to disclose any Highly Confidential Information for a purpose other than those permitted by law, we must obtain your authorization.
E. Revocation of Your Authorization. You may revoke your authorization, except to the extent that we have taken action in reliance upon it, by delivering a written revocation statement to the Privacy Office identified below.
VI. Your Individual Rights
A. For Further Information; Complaints. If you desire further information about your privacy rights, are concerned that we have violated your privacy rights or disagree with a decision that we made about access to your Protected Health Information, you may contact our Privacy Office. You may also file written complaints with the Office for Civil Rights of the U.S. Department of Health and Human Services. Upon request, the Privacy Office will provide you with the correct address for the Director. We will not retaliate against you if you file a complaint with us or the Director.
B. Right to Request Additional Restrictions. You may request restrictions on our use and disclosure of your Protected Health Information (1) for treatment, payment and health care operations, (2) to individuals (such as a family member, other relative, close personal friend or any other person identified by you) involved with your care or with payment related to your care, or (3) to notify or assist in the notification of such individuals regarding your location and general condition. While we will consider all requests for additional restrictions carefully, we are not required to agree to a requested restriction unless the request is to restrict our disclosure to a health plan for purposes of carrying out payment or health care operations, the disclosure is not required by law and the information pertains solely to a health care item or service for which you (or someone on your behalf other than the health plan) have paid us out of pocket in full. If you wish to request additional restrictions, please obtain a request form from our Privacy Office and submit the completed form to the Privacy Office. We will send you a written response.
C. Right to Receive Communications by Alternative Means or at Alternative Locations. You may request, and we will accommodate, any reasonable written request for you to receive your Protected Health Information by alternative means of communication or at alternative locations.
D. Right to Inspect and Copy Your Health Information. You may request access to your medical record file and billing records maintained by us in order to inspect and request copies of the records. Under limited circumstances, we may deny you access to a portion of your records. If you desire access to your records, please obtain a record request form from the Privacy Office and submit the completed form to the Privacy Office. If you request copies, we may charge you a reasonable copy fee.
E. Right to Amend Your Records. You have the right to request that we amend your Protected Health Information maintained in your medical record file or billing records. If you desire to amend your records, please obtain an amendment request form from the Privacy Office and submit the completed form to the Privacy Office. We will comply with your request unless we believe that the information that would be amended is accurate and complete or other special circumstances apply.
F. Right to Receive An Accounting of Disclosures. Upon request, you may obtain an accounting of certain disclosures of your Protected Health Information made by us during any period of time prior to the date of your request provided such period does not exceed six years. If you request an accounting more than once during a twelve (12) month period, we may charge you a reasonable fee for the accounting statement.
G. Right to Receive Paper Copy of this Notice. Upon request, you may obtain a paper copy of this Notice, even if you agreed to receive such notice electronically.
VII. Effective Date and Duration of This Notice
A. Effective Date. This Notice is effective on April 11, 2022.
B. Right to Change Terms of this Notice. We may change the terms of this Notice at any time. If we change this Notice, we may make the new notice terms effective for all your Protected Health Information that we maintain, including any information created or received prior to issuing the new notice. If we change this Notice, we will post the new notice in our waiting room and on our Internet site at www.curaihealth.com. You also may obtain any new notice by contacting the Privacy Office.
VIII. Contact Information
You may contact us at:
Curai Health
Privacy Administrator
privacy@curai.com
2443 Fillmore St. #380-15799, San Francisco, CA 94114
A health record locator service or health information exchange (HIE) allows Curai Health and your treating Providers to provide you with better care by electronically sharing your health information with, and accessing your health information from, other providers who participate in the HIE. Curai Health currently accesses and shares information through the following services:(1) CommonWell Alliance (www.commonwellalliance.org), (2) Care quality(www.carequality.org), and (3) ehealth Exchange (www.ehealthexchange.org).If you opt in, Curai Health and your treating Providers will request, receive and share your personally identifiable healthcare information (PHI/medical records) from or with your other treating providers outside of Curai Health that participate in the HIEs identified above unless you opt out at a later time by changing your HIE settings within your Curai Health Account. If you opt out, Curai Health and your treating Curai Health providers will not be able to request, receive or share your personally identifiable healthcare information (PHI/medical records) from or with your other treating providers outside of Curai Health that participate in the HIEs identified above. Opting out of the HIE will not affect your ability to access medical care. If you opt out, your decision only applies to the sharing of healthcare information through the HIEs described above. Your health care providers may still have access to your health information using other methods, such as fax, telephone, email or mail.In addition, it will not prevent your providers from sharing your health information with authorized entities when necessary for public health purposes via proper authorization, research purposes that are permitted or required by state or federal law, or emergency situations.
I voluntarily consent to the diagnosis, medical care and treatment provided by First Opinion Health Services (FL) PLLC, First Opinion Health Services (IL), P.C., NY Medicine/Telemedicine, PLLC, First Opinion Health Services (NC), PLLC, First Opinion Health Services, Inc., First Opinion Health Services (TX), PLLC, First Opinion Health Services (GA), LLC, First Opinion Health Services NJ, LLC (“Curai Health”) that is considered necessary or recommended by my minor child’s physician(s) and other healthcare providers in their professional judgment.
I understand that there are risks and benefits associated with medical care and treatment provided to my child, including the provision of medical care through telehealth. I understand it is my responsibility to manage the login credentials for my child’s account on my mobile device and to be present for any pediatric encounter.
I further understand that there is no certainty that benefits will be achieved. I understand that reasonable alternatives to recommended care and treatment, if they exist, will be explained to me by my child’s physician or other healthcare provider. I understand that it is up to my child’s physician or other healthcare provider to determine whether or not specific clinical needs are appropriate for a telehealth encounter.
I understand that I will have the opportunity to ask questions about my child’s healthcare and treatment. I swear and affirm that I am my child’s parent or legal guardian with the right to make medical decisions about my child’s healthcare and there are no court orders preventing me from granting this consent to provide healthcare services to my child.
I voluntarily consent to the diagnosis, medical care and treatment provided through telehealth by First Opinion Health Services (FL) PLLC, First Opinion Health Services (IL), P.C., NY Medicine/Telemedicine, PLLC, First Opinion Health Services (NC), PLLC, First Opinion Health Services, Inc., First Opinion Health Services (TX), PLLC, First Opinion Health Services (GA), LLC, First Opinion Health Services NJ, LLC (“Curai Health”) that is considered necessary or recommended by my physician(s) and other healthcare providers in their professional judgment.
I understand that Curai also requires my parent or legal guardian to consent to my treatment and hereby authorize Curai Health to reach out to my parent or legal guardian by electronic means or telephone for purposes of securing his or her consent to provide healthcare services to me via telehealth modalities. I also consent to Curai Health sharing my medical information and records, including information about my treatment, with my parent or guardian. I further consent to the release of the relevant parts of my records so that my care can be paid for by my health plan or other responsible party.
I understand that I will have the opportunity to ask questions about my healthcare and treatment.
Note: If you do not feel comfortable with any of the terms set forth herein, you should not sign this Form, and should contact Curai Health at support@curai.com to discuss further.