HIPAA Notice of Privacy Practices

Renovia Health, Inc. and the independent, licensed clinicians who provide care through the Renovia platform are committed to protecting the privacy and security of your protected health information (PHI). We are required by the Health Insurance Portability and Accountability Act (HIPAA) to maintain the privacy of your PHI, to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

PHI we may collect includes:

• Identifying details such as your name, date of birth, address, email, and phone number.
• Health intake information including height, weight, BMI, medical history, medications, allergies, and conditions.
• Clinical notes, prescriptions, lab results, and messages exchanged with your care team.
• Payment and billing information processed by our payment providers.

• Treatment. To allow licensed clinicians to evaluate you, determine eligibility, prescribe when clinically appropriate, and provide ongoing follow-up.
• Payment. To bill and collect payment for services and medications.
• Health care operations. For quality review, clinician oversight, and improving our services.
• Business associates. With vendors who support our services (for example, telehealth infrastructure, pharmacies, laboratories, and secure hosting) under written HIPAA business associate agreements.
• As required by law. Including public health reporting, court orders, and other legally mandated disclosures.

We do not sell your PHI. We do not use your PHI for marketing purposes without your written authorization. Any use or disclosure not described in this notice will be made only with your written authorization, which you may revoke at any time in writing.

We apply administrative, physical, and technical safeguards designed to protect PHI, including encryption of data in transit and at rest, role-based access controls, audit logging, and vendor due diligence. Access to PHI is limited to personnel and clinicians who need it to provide or support your care.

• Request access to and a copy of your medical records.
• Request an amendment to information you believe is incorrect or incomplete.
• Request an accounting of certain disclosures of your PHI.
• Request restrictions on certain uses and disclosures.
• Request confidential communications through an alternative means or location.
• Receive notice in the event of a breach of unsecured PHI.
• Obtain a paper or electronic copy of this notice at any time.

To exercise your rights or raise a privacy concern, contact our Privacy Officer at privacy@joinrenovia.com. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will never retaliate against you for filing a complaint.

We may change this notice at any time. Revised notices will be posted on this page with an updated effective date and will apply to all PHI we maintain.