Privacy Policy & Notice of Privacy Practices

Last updated: September 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

1. Who we are

MyRxProvider operates a telehealth platform connecting patients with independent licensed providers and licensed U.S. pharmacies. Your protected health information ("PHI") is safeguarded in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state law.

2. Your employer's role — and its limits

MyRxProvider is offered to you as an employer-sponsored benefit. Your employer never receives your individual health information. Your employer receives only de-identified, aggregate program statistics (for example, total enrollment counts). Your intake answers, diagnoses, visit notes, prescriptions, and messages are never shared with your employer.

3. How we use and disclose PHI

• Treatment: sharing information among your care team and pharmacies to provide and coordinate your care.
• Payment: billing and collecting payment for services under your benefit.
• Healthcare operations: quality improvement, licensing, audits, and platform administration.
• As required by law: public health reporting, abuse reporting, health oversight, judicial proceedings, and law enforcement, in each case only as legally required or permitted.
• With your written authorization: any other use or disclosure. You may revoke authorization at any time in writing.

We do not sell your PHI. We do not use your PHI for third-party advertising.

4. Your rights

• Access: obtain a copy of your medical records.
• Amendment: request correction of records you believe are inaccurate or incomplete.
• Accounting of disclosures: receive a list of certain disclosures we have made.
• Restrictions: request limits on how we use or disclose your PHI.
• Confidential communications: ask to be contacted in a specific way or at a specific location.
• Breach notification: be notified if a breach compromises the privacy of your PHI.
• Paper copy: receive a paper copy of this notice on request.

To exercise any right, contact privacy@myrxprovider.com. If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be retaliated against for filing a complaint.

5. Website data

Our website collects standard technical data (device type, pages viewed) to operate and improve the service. Intake form responses are transmitted over encrypted connections. We use only essential cookies necessary for the platform to function; we do not use advertising trackers on pages where health information is collected.

6. Security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, role-based access controls, and audit logging. No system is perfectly secure; we will notify you of any breach as required by law.

7. Data retention

Medical records are retained as required by applicable state medical-records retention laws. You may request deletion of non-medical account data at any time.

8. Changes to this notice

We may update this notice from time to time. The current version will always be posted at this address with its effective date.

9. Contact

Privacy Officer — privacy@myrxprovider.com