Privacy Policy

Introduction

MedNex ("we," "our," or "us") takes your privacy seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and how we keep it safe when you use our healthcare platform, website, mobile applications, and related services (collectively, the "Services").

By using our Services, you agree to the practices in this Privacy Policy. If you don't agree, please don't use our Services.

Information We Collect

Personal Identifiable Information (PII)

We collect the following personal information:

• Full name, date of birth, and gender
• Contact information (email address, phone number, mailing address)
• Social Security Number (when required for billing or insurance purposes)
• Emergency contact information
• Insurance and billing information
• Government-issued identification

Protected Health Information (PHI)

As required under HIPAA, we collect and store:

• Medical history and health records
• Diagnosis and treatment information
• Prescription and medication data
• Laboratory and imaging results
• Clinical notes and care plans
• Insurance claims and billing records

Usage Data

We also collect data about how you use our Services:

• Device information (IP address, browser type, operating system)
• Log data (access times, pages viewed, links clicked)
• Location data (with your permission)
• Cookies and similar tracking technologies

How We Use Your Information

Here is how we use your information:

• Providing medical services and coordinating patient care
• Scheduling and managing appointments
• Sharing test results and health updates with you
• Processing billing, payments, and insurance claims
• Sending appointment reminders and follow-up messages via SMS, email, or in-app notifications
• Improving our Services through usage analytics
• Meeting legal and regulatory requirements
• Preventing fraud and protecting account security

Information Sharing & Disclosure

We do not sell your personal information. We may share it in these situations:

• With Your Consent: When you authorize us to share information with other healthcare providers or third parties
• For Treatment: With healthcare professionals involved in your care
• For Payment: With insurance companies and billing processors
• For Operations: Quality improvement, staff training, and compliance work
• Legal Requirements: When required by law, court order, or regulation
• Business Associates: With HIPAA-compliant vendors that help us run our Services

Note: Phone numbers collected for SMS consent will not be shared with third parties or affiliates for marketing purposes.

Your Rights

Under HIPAA and applicable privacy laws, you have these rights:

Data Deletion Requests

To request deletion of your personal data, email us at privacy@mednexapp.com. A few things to know:

• We will verify your identity before processing any request
• We process requests within 30 days
• Some records must be kept by law (for example, medical records have minimum retention periods)
• Deleting certain data may limit your ability to use our Services

Third-Party Services

Our Services connect to third-party tools, including:

• Payment processors (Stripe)
• SMS and communication services (Twilio)
• Email services (AWS SES)
• Analytics services
• Cloud hosting providers (AWS)

Each of these services has its own privacy policy. Where a partner handles Protected Health Information, we require a Business Associate Agreement.

Security Measures

We use the following measures to protect your information:

• SSL/TLS encryption for all data transmission (HTTPS)
• AES-256 encryption for data at rest
• Multi-factor authentication for account access
• Security reviews of our systems and of who can access them
• Automated monitoring and alerts for our infrastructure
• Secure data centers with physical access controls

If a data breach occurs, we will notify affected individuals and the appropriate authorities within 72 hours of discovery, as required by law.

Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If you believe your child has given us their information, please contact us right away so we can remove it.

Changes to This Policy

We may update this Privacy Policy occasionally. When we make changes, we will post the updated version here and change the "Last Updated" date at the top. We recommend checking back from time to time.