Consumer Health Data Privacy Policy

Our privacy commitment

Path in View does not sell consumer health data or disclose it to advertisers, data brokers, or unrelated companies. We disclose health data only to the service providers needed to operate Path in View, to a care provider or export recipient you choose, or when disclosure is required by law. Service providers act for Path in View under contractual restrictions and may not use health data for their own advertising.

1. Consumer health data we collect

Consumer health data is information that identifies or can reasonably be linked to a person and reveals or may reveal their past, present, or future physical or mental health. Depending on how you use Path in View, this may include:

• symptoms, mood, pain, sleep, activity, nutrition, and habits;
• measurements, ratings, goals, and trends;
• medication names, forms, strengths, schedules, doses, and notes;
• daily journal entries and free-text health notes;
• inferences generated from comparing or organizing your entries;
• information about care-provider connections and health-data sharing.

2. Sources

We collect consumer health data from you when you enter or import it; from a care provider you choose to connect with when they submit a suggestion or permitted note; and from service features that organize or calculate trends from the information already in your account. We do not purchase consumer health data from data brokers.

3. Why we collect and use it

With your affirmative consent, we collect and use consumer health data to provide the features you request: recording daily information, displaying history and trends, evaluating user-defined targets, creating exports, and sharing information with a care provider you authorize. We also use the minimum information reasonably necessary to secure, maintain, and troubleshoot those features.

If we want to collect or use consumer health data for a materially different purpose, we will describe that purpose and obtain additional consent when required.

4. Consumer health data we share

We do not make your health information available to the public or to unrelated companies. We may disclose the categories described above only to:

• Your authorized care providers, when you accept or initiate a connection. You can revoke future access at any time.
• Processors acting for Path in View, such as cloud hosting, database storage, backup, and security infrastructure providers. They may process data only to provide contracted services and are not permitted to use it for their own advertising.
• Authorities or other recipients required by law,when disclosure is legally required or reasonably necessary to protect rights, safety, and service security.

We do not sell consumer health data. We do not share consumer health data for targeted advertising. We do not use geofencing to identify or target people seeking health care services.

Transactional emails are used only for invitations, verification, security, and account actions. We do not include journal entries, symptoms, measurements, medication records, health notes, trends, or reports in those emails.

5. Your health-data rights

Subject to applicable law, you may:

• confirm whether we collect, use, or share your consumer health data;
• access or export the consumer health data associated with your account;
• correct inaccurate information;
• delete consumer health data, including data held by processors;
• withdraw consent to future collection or sharing;
• revoke a care provider's future access;
• appeal our decision if we deny a request.

Some features may stop working after consent is withdrawn. Withdrawal does not affect processing that occurred before it was received.

6. How to exercise your rights

Use the controls in your Profile, Connections, and export areas, or email privacy@pathinview.com. Describe the request and the email address connected to your account. We may ask for information necessary to verify your identity and authority. An authorized agent may submit a request where permitted by law, subject to verification.

To appeal a denied request, reply to our decision with the word “Appeal” and explain why you believe the decision should be reconsidered.

7. Withdrawal and deletion

You can withdraw a provider's access without deleting your account. You can also request deletion of particular information or permanently delete your entire account from your Profile. Complete account deletion requires a one-hour confirmation link sent to the email address associated with the account and a separate final confirmation. Export anything you want to keep before confirming because deletion cannot be undone.

Confirmed account deletion removes consumer health data, daily entries, notes, trackers, targets, medication records, account settings, invitations, and care-provider connections from active systems. It also ends future access through every connection. Deletion is propagated to applicable processors and archived systems as required by law.

Encrypted backup copies may remain until their scheduled rotation, during which they are isolated from ordinary use and will not be restored except for disaster recovery or security needs. Deleting an account cannot retract information that an authorized care provider previously viewed or lawfully retained outside Path in View.

8. Changes and contact

We will not materially expand the collection, use, or sharing described here without notice and consent where required. Questions, requests, complaints, and appeals may be sent to privacy@pathinview.com.