Privacy Notice

1. Information we collect

We collect information you provide to Together, such as account details, care-circle invitations, care plans, schedules, medication and wellness entries, recordings, transcripts, and messages. We also collect limited technical information needed to operate and secure the service, such as device, session, and security-verification information.

When you choose to connect MyChart, we receive only the information you authorize through Epic’s authorization experience. In the current Together release, this is authorized upcoming appointment information, such as appointment date and time, location, provider, and status.

2. How we use information

We use information to provide and improve Together; organize and display the care information you choose to add or connect; enable authorized care-circle sharing; protect the service; investigate misuse; and comply with legal obligations. We do not use care information for advertising or sell care information.

3. How we share information

We share information with people you authorize in your care circle, service providers that help us securely operate Together, and others when required by law or necessary to protect people and the service. We do not share your care information with a care-circle member unless you or an authorized administrator grants that access.

4. MyChart connections

MyChart connections are optional. You authenticate directly with your health system. Together does not see or store your MyChart password. We use a secure authorization token to retrieve the specific information you approved. You may disconnect MyChart in Together; after disconnection, new information will stop syncing. [COUNSEL: CONFIRM THE RETENTION/DELETION TREATMENT OF PREVIOUSLY IMPORTED APPOINTMENTS.]

5. How we protect information

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, and disclosure. No system is perfectly secure, and we cannot guarantee absolute security. Please use a unique password, protect your device, and promptly report suspected unauthorized access.

6. Your choices and requests

You may update certain account and care-circle information in Together, manage invitations and connections, and request assistance with access, correction, or deletion as applicable. You may also revoke a MyChart authorization through your health system. Contact us using the details below for privacy requests.

7. Retention

We retain information for as long as needed to provide Together, meet legal and operational requirements, resolve disputes, and enforce agreements. [COUNSEL: INSERT APPROVED RETENTION SCHEDULE, ACCOUNT-DELETION PROCESS, AND BACKUP-RETENTION LANGUAGE.]

8. Children

[COUNSEL: INSERT APPROVED CHILDREN’S PRIVACY LANGUAGE, INCLUDING COPPA AND PARENT/GUARDIAN REQUIREMENTS IF THE SERVICE IS MADE AVAILABLE TO MINORS.]

9. Changes to this Notice

We may update this Notice as Together evolves. We will post the updated version here and revise the effective date. If required by law, we will give additional notice before a material change takes effect.