Mobile Privacy Policy – Change Healthcare MobileCare 3.7

Effective Date: November, 2017

The purpose of the Change Healthcare MobileCare application and service is to empower healthcare-professionals with tools to securely and effectively facilitate patient care in the home health and hospice care settings. As you use this service, we want you to understand how we're using information and the ways in which you can protect your privacy.

This Privacy Notice explains:

Privacy matters to Change Healthcare so whether you are new to Change Healthcare or a long-time user, please do take the time to get to know our practices - and if you have any questions contact us.

Collection of Information

Information controlled by your Institution

The MobileCare Application (“Application”) accesses information in a database in connection with the licensed purchase of MobileCare by your home health agency or hospice institution (“Institution”). After download, the MobileCare Application provides users authorized by your Institution access to your Institution’s servers and databases. Information transmitted to your Institution may be stored, collected, used, retained, or shared by your Institution according to its policies and procedures.

What Information does the Application collect?

After download, you may access your Institution’s database by logging in with your credentials. This Application enables you to search or review information contained in your Institution’s database. Based on your Institution’s configuration of the Application, the Application may also collect:

Information you provide

Information from your use of the Application

Information on your location

When you enable a location-based service, we may collect information about your location for troubleshooting or to enhance your experience with the Application. Furthermore, we may share your geolocation with your Institution as part of your check-in process at patient sites. Geolocation services are critical components of EVV (Electronic Visit Verification) used to triangulate your location, which establishes that the patient is within a specific radius of the address at check-in. A different component of the system verifies that the patient’s visit has occurred and documents the precise time service from beginning to end. This information is only stored until the next patient check-in occurs.

How does Change Healthcare use the information we collect?

Change Healthcare uses the information we collect to provide, maintain, protect and improve the quality of our services, to develop new products and services, and to protect Change Healthcare and our users.

Information we collect may be used to:

Does Change Healthcare share your personal information?

Information entered into the Application is shared with your Institution. Change Healthcare exercises no authority over your Institution’s privacy and data collection practices and policies or how your Institution may use information transmitted through this Application. Change Healthcare may share information with companies, organizations or individuals outside of Change Healthcare if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

Change Healthcare may also share information with our service partners who do work on our behalf and do not have an independent use for the information we disclose to them, and have agreed to adhere to appropriate privacy and confidentiality provisions.

Information from Children

This Application is not intended for any user under the age of 13.

Health Information

As a key provider of services and technology to the healthcare industry, Change Healthcare has implemented programs to address privacy and security rules required by HIPAA and HITECH.

Health Information transmitted through this Application is controlled and maintained by your Institution. The Application may store up to a 15 day window of information of your scheduled patients on your device based on your Institution’s settings.

Information Security

Change Healthcare has established appropriate physical, electronic and administrative safeguards to protect the information we collect from or about our Application users. We restrict access to personal information to Change Healthcare employees, contractors and agents who need to know that information in order to process it for us, and who are subject to confidentiality obligations. Change Healthcare maintains server logs, and the application uses an OAuth token authentication (secure delegated access) to maintain an authenticated session with the server.

Information Retention

Change Healthcare retains Information collected through the Application only for as long as it is necessary to transmit that data and information to your Institution’s back office systems. We store logging and audit data for a length of time long enough to comply with applicable laws, regulations and court orders.

For ease of use, the Application temporarily stores some user provided information, such as user name and password until the Application is closed. Information stored on the device is permanently deleted if the Application is uninstalled.

We do store your patient’s information, including personal and/or certain protected health information, on your device at your Institution’s request. The information is only on your device for a short period of time (no more than 15 days), and patient information stored on the device is permanently deleted if the Application is uninstalled.

Tranmission of data from your device to your Institution’s back-office system occur automatically, provided you have sufficent cellular network service. It is important that you be in an area of good cellular coverage as often as possible to faciliate frequent and timely transfer of information.

Choices

You may discontinue information collection by uninstalling the Application. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

We will engage you in key decisions at appropriate times during your use of the Application such as allowing push notifications or collection of geolocation information.

Do Not Track Signals

This Application does not track users over time and across third party websites to provide targeted advertising, and therefore does not respond to Do Not Track (DNT) signals. However, some third party sites do keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. If you are visiting such sites and do not want to be tracked, please adjust your web browser settings so third parties know you do not want to be tracked.

External Links

Change Healthcare may provide links to various third party websites within the Application. However, even if a third party affiliation exists between Change Healthcare and the destination site, Change Healthcare exercises no authority over linked sites, each of which maintains independent privacy and data collection policies and procedures. Change Healthcare assumes no responsibility or liability for these independent privacy practices of destination sites. Similarly, Change Healthcare cannot take responsibility for the privacy initiatives or the content of such websites. These destination links are provided only for your convenience, and as such, you access them at your own risk.

Privacy Notice Changes

This Privacy Notice is effective November 10, 2017. This Privacy Notice may be modified. Any changes to this Privacy Notice will be posted to this page. Regardless of our efforts, we encourage you to review this Privacy Notice each time you visit the Application.

Consent

By using this Application, you are agreeing to our processing of information as set forth in this Privacy Notice. “Processing” means using cookies on a computer or mobile device or using or touching information in any way, including but not limited to, collecting, storing, deleting, using, combining, and disclosing information.

Contact Us

If you have questions regarding this Privacy Notice, please contact us via email at chiefprivacyofficer@changehealthcare.com (please include “MobileCare Privacy Notice” in the subject line), or via US Mail at: Privacy Office (Attn: Privacy Notice, MobileCare), 5995 Windward Parkway, 5th Floor, Alpharetta, GA 30005.