Our Privacy Policy addresses how MediFind collects and processes personal data.  Under some state laws, some of this data is referred to as “consumer health data.”  These laws include Washington’s My Health My Data Act, Nevada’s Consumer Health Data Privacy Law, Connecticut’s Data Privacy Act, and other U.S. health privacy laws, as each are amended and as and when they become effective, including any regulations thereunder (collectively, “Consumer Health Data Laws”).   

If you are a consumer in a state with a Consumer Health Data Law, this Consumer Health Data Privacy Policy gives you the information required under such Consumer Health Data Laws.   

1. Categories of Consumer Health Data Collected, the Purpose for Which the Data is Collected, Including How the Data Will be Used 

We collect the categories of consumer health data, and use them for the purposes, set forth below. 

• Profile and contact information, for example, name, email, phone number, mailing address, age/date of birth, zip code, gender, account name, password.  If you create a profile on MediFind, you may provide certain information.  We use this to provide you with an account on our site, which may contain some of the below categories of information, and to administer access. 
• Pages you bookmark or save in your profile.  You can also save and bookmark information about topics such as conditions, providers, or clinical trials of interest to you so that you can refer to them again in the future. 
• Booking request information (including your name, contact and demographic information, a reason for a visit that you provide in a free text field, insurance information, and information about the provider to whom you want us to transmit a booking request).  If you request to make an appointment with a particular provider, we may collect your name, contact and demographic information, a reason for a visit that you provide in a free text field, insurance information, and information about the provider with whom you wish to book the visit. 
• Your registration for additional services such as registries.  From time to time, we may offer you the ability to sign up for additional services from MediFind, such as a registry that provides you with additional information about a condition as it becomes available.  If you sign up for this service, we’ll collect information that you’ve registered to provide it. 
• Page view data, including data about the pages you have visited for particular conditions, providers, or trials of interest as well as technical information that helps our product function, for example, information from your browser, computer, or mobile device as you continue to interact with MediFind’s website.  This information includes device and network information, log files and analytics information.  MediFind also makes use of log files, which include IP addresses, browser type, date/time stamp, and number of clicks.   We use this information to help our site function, to conduct analytics and plan the content on our page, and to provide security for our webpage. 
• Information you provide in the course of user support inquiries and to fulfill privacy requests.  In some circumstances, you may provide us with consumer health data in this context.  If you do so, we use such information to respond to your inquiry, or to fulfill your request, as applicable. 

2. Categories of Sources from Which Consumer Health Data is Collected 

We collect consumer health data when you use our site.  We collect this information to the extent necessary to provide a product or service that you have requested from us. 

We may also collect consumer health data from you or your authorized representative if you or your authorized representative submit such data in connection with a user support inquiry or to make a privacy request of us. 

3. Categories of Consumer Health Data that is Shared 

When you use our site, you may request that we share consumer health data with providers listed.  When we do so, we share the information you provide in the interactive form, to the extent necessary to complete your requests for this service we offer you. 

4. List of Categories of Third Parties and Specific Affiliates with Which We Share Consumer Health Data 

We do not sell your consumer health data.   

Your Request 

We only share your consumer health data when you direct us to do so (for example, when you request that we help you request an appointment with a particular provider). 

Affiliates 

MediFind is a wholly owned subsidiary of Phreesia, Inc.  We share consumer health data with Phreesia, Inc. 

Legal and Government Access  

We will not share your consumer health data with law enforcement, government agencies, or private litigants unless such a disclosure is required by a valid and legally binding request.  

If we receive a law enforcement request for your consumer health data, we will try to inform you by providing you a notice by sending an email to you at an email address we have on file for you, unless the law does not allow us to provide this notice to you.  

Business Organizations  

We may disclose your consumer health data in connection with any business combination, securities offering, bankruptcy, reorganization, dissolution or other similar transaction.  In such case, your consumer health data would remain subject to the provisions of this Consumer Health Data Privacy Policy, unless amended as described below.  

5. How to Exercise Your Rights with Respect to Your Consumer Health Data 

You, or your authorized agent, may exercise any of your Consumer Health Data Law rights by emailing MediFind’s Privacy Officer at privacy@medifind.com or by submitting the Feedback Form on our webpage.  Before we can implement your request, we’ll need to confirm your identity.  To allow us to confirm your identity, you will need to provide your name and additional information.  

Please contact our Privacy Officer through the email or Feedback Form listed above with any questions or concerns about this Consumer Health Data Privacy Policy or our information practices. 

Supplement to Consumer Health Data Privacy Policy for Nevada Consumers 

This supplement applies to Nevada consumers.  It provides additional disclosures required by Nevada’s Consumer Health Data privacy law. 

1. Purposes and Manner of Processing 

We collect, use, process, and share consumer health data for the purposes and in the manners described above in Section 1 of our Consumer Health Data Privacy Policy. 

2. Review and Revision of Consumer Health Data 

If you would like to review and/or revise your consumer health data, you may submit a request to us via any methods listed in our Consumer Health Data Privacy Policy.  We will respond to your requests to exercise your rights in accordance with applicable law. 

3. Changes 

We may update this Consumer Health Data Privacy Policy from time to time.  If we update our Consumer Health Data Privacy Policy, we will update this webpage.  You can determine when this Consumer Health Data Privacy Policy was last revised by referring to the date at the bottom of this page.  Any changes to our Consumer Health Data Privacy Policy will become effective upon posting of the revised Consumer Health Data Privacy Policy.  We encourage you to bookmark this webpage and to periodically review it to ensure familiarity with the most current version of our Consumer Health Data Privacy Policy. 

4. Third Party Collection of Consumer Health Data 

We do not track your browsing activity on third-party sites with third-party pixels, cookies or similar technologies.   

Effective Date: March 31, 2024