NOTICE OF PRIVACY PRACTICES Date of this notice: March 2025

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This notice describes the privacy practices of EverCare in accordance with the privacy rules under the Health Insurance Portability and Accountability Act of1996 (“HIPAA”). We have agreed to abide by the terms of this notice.

The HIPAA Privacy Rule protects only certain types of medical information, known as “protected health information” (“PHI”). Generally, PHI is individuallyidentifiable health information, including demographic information, collected from you or received by a health care provider, a health care clearinghouse, a health plan, or your employer on behalf of a group health plan that relates to:

1. Your past, present, or future physical or mental health or condition.

2. The provision of health care to you; or

3. The past, present, or future payment for the provision of health care to you.

We are required by law to maintain the privacy of your health information and to provide you with this notice of our legal duties and privacy practices regarding your health information. We are committed to protecting your health information.

We comply with the provisions of the Health Information Technology for Economic and Clinical Health (HITECH) Act. We maintain a breach reporting policy and have in place appropriate safeguards to track the required disclosures and meet appropriate reporting obligations. We will notify you promptly in the event a breach occurs that may compromise the security or privacy of your PHI. Additionally, we comply with the “Minimum Necessary” requirements of HIPAA and the HITECH amendments.

For more information concerning this notice, please see: https://www.hhs.gov/hipaa/for-individuals/index.html

HOW WE MAY USE AND DISCLOSE HEALTH INFORMATION ABOUT YOU

The following categories describe the different ways we may use or disclose your protected health information (PHI).

For treatment, we may use or disclose your PHI to facilitate the provision of medical treatment or services by healthcare providers. We may disclose protected health information (PHI) about you to providers, including doctors, nurses, or technicians, who are involved in your care. For example, we might disclose information about your prior treatment to a counselor to determine if it affects your current treatment.

For payment purposes, we do not use or disclose PHI related to payment activities.

For Healthcare Operations, we may use and disclose your PHI for EverCare operations, data analysis, conducting quality assessment and improvement activities, reviewing your treatment, and other general administrative purposes.

Health-related benefits and services: We may use or disclose health information about you to communicate to you about health-related programs, benefits, and services. For example, we may communicate with you about health-related benefits and services that add value to but are not part of your health plan.

To avoid a serious threat to health or safety, we may use and disclose your PHI to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Military and Veterans: If you are a member of the armed forces, we may disclose your PHI if required by military command authorities.

Workers’ Compensation: We may disclose your PHI as necessary to comply with workers’ compensation or similar programs.

Public Health Risks: We may disclose your PHI for public health activities, such as to prevent or control disease, injury, or disability, or to report child abuse, domestic violence, disease, or exposure to infectious diseases.

Health Oversight Activities: We may release PHI to assist health agencies during audits, investigations, or inspections.

Lawsuits and Disputes: If you are involved in a lawsuit or dispute, we may disclose your PHI in response to a court or administrative order. We may also disclose PHI about you in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if efforts have been made to notify you about the request or to obtain an order protecting the requested information.

Law Enforcement: We may release PHI if asked to do so by a law enforcement official:

• In response to a court order, subpoena, warrant, summons, or similar process.

• To identify or locate a suspect, fugitive, material witness, or missing person.

• About the victim of a crime, if, under certain limited circumstances, we are unable to obtain the person’s agreement.

• About a death we believe may be the result of criminal conduct; and in emergency circumstances to report a crime; the location of the crime or victims; or the identity, description or location of the person who committed the crime.

Coroners, Medical Examiners, and Funeral Directors: We may disclose protected health information (PHI) to coroners, medical examiners, or funeral directors. This may be necessary, for example, to identify a deceased person or determine the cause of death.

National Security and Intelligence Activities: We may disclose your PHI to authorized federal officials for intelligence, counterintelligence, and other national security activities as permitted by law.

To Plan Sponsor: We may disclose your PHI to certain employees of the Plan Sponsor (i.e., the company) to administer the Plan. These employees will only use or disclose your PHI as necessary to perform Plan administrative functions or as otherwise required by HIPAA.

Disclosure to Others: We may use or disclose your PHI to your family members and friends who are involved in your care. We may also disclose PHI to an individual who has legal authority to make healthcare decisions on your behalf.

REQUIRED DISCLOSURES

The following is a description of the disclosures of your PHI that EverCare is required to make:

As required by law, we will disclose PHI about you when required to do so by federal, state, or local law. For example, we may disclose PHI when required by a court order in a litigation proceeding, such as a malpractice action.

Government Audits: EverCare is required to disclose your PHI to the Secretary of the United States Department of Health and Human Services when the Secretary is investigating or determining compliance with HIPAA.

Disclosures to you: Upon your request, EverCare is required to disclose to you the portion of your PHI that contains medical records and any other records used to make decisions regarding your healthcare.

WRITTEN AUTHORIZATION

EverCare will use or disclose your PHI only as described in this notice. You don’t need to take any action to allow us to disclose your PHI as described here. If you want us to use or disclose  

your PHI for another purpose, you must authorize us in writing to do so. For example, we may use your PHI for research purposes if you provide us with written authorization to do so. You may revoke your authorization in writing at any time. When we receive your revocation,  

it will be effective only for future uses and disclosures. It will not be effective for any PHI that we may have used or disclosed in reliance upon your written authorization. We do not sell PHI or use it for marketing purposes. We will not condition treatment or eligibility for benefits on your agreement to sign an authorization.

ADDITIONAL INFORMATION REGARDING USES OR DISCLOSURES OF YOUR PHI

For additional information on how we are permitted or required to use or disclose your PHI, please visit: https://www.hhs.gov/hipaa/for-individuals/guidance-materials-for-consumers/index.html

YOUR RIGHTS REGARDING PHI THAT WE MAINTAIN: You have the following rights regarding PHI we maintain about you:

Your Right to Inspect and Obtain a Copy of Your PHI: You have the right to inspect and copy your PHI. You must submit your request in writing. If you request a copy of the information, we may charge a reasonable fee to cover the expenses associated with your request. A copy will be provided within 30 days of your request.

EverCare may deny your request to inspect and copy PHI in certain limited circumstances. If you are denied access to your PHI, you may request a review of the denial by submitting a written request to the contact person listed below.

Your right to amend incorrect or incomplete information: If you believe that the PHI EverCare has about you is inaccurate or incomplete, you may request that we change your PHI by submitting a written request. You must also provide a reason for your request. We are not required to amend your PHI; however, if we deny your request, we will provide you with information about our decision and the appeal process, which must be initiated within 60 days of your request.

Your right to request restrictions on disclosures to health plans: Where applicable, you may request that restrictions be placed on disclosures of your PHI.

Your right to an accounting of disclosures we have made: You may request an accounting of disclosures of your PHI that

we have made, except for disclosures we made to you or according to your written authorization or that were made for treatment, payment, or health care operations. You must submit your request in writing. Your request may specify a period of up to six years before the date of your request. We will provide one list of disclosures to you per 12-month period at no additional charge; however, we reserve the right to charge for any additional lists.

Your right to request restrictions on uses and disclosures: You have the right to request restrictions or limitations on how we use or disclose your PHI. You must submit a request for such restrictions in writing, including the information you wish to limit the scope of the limitation and the person to whom the limits apply. We may deny your request.

Your right to request confidential communications through a reasonable alternative means or at an alternative location: You may request that we direct confidential communications to you in  

an alternative manner (e.g., by facsimile or email). You must submit your request in writing. We are not required to agree to your request; however, we will accommodate it if doing so would place you in danger.

Your right to a paper copy of this notice: To obtain a paper copy of this notice or a more detailed explanation of these rights, send us a written request at the address listed below. You may also obtain a copy of this notice from our website: https://evercaremobile.com/  

Your right to appoint a personal representative: Upon receipt of appropriate documentation appointing an individual as your representative, medical power of attorney, or legal guardian, that individual will be permitted to act on your behalf and make decisions regarding your healthcare.

CHANGES TO THIS NOTICE

We reserve the right to amend this Notice of Privacy Practices at any time in the future. Any such amendments will take effect for all PHI that we maintain. We will advise you of any significant changes to the notice. We are required by law to comply with the current version of this notice. Changes to the Notice of Privacy Practices will be posted on the Privacy Policy section of the EverCare website: https://evercaremobile.com/

COMPLAINTS

If you believe your privacy rights or rights to notification in the event of a breach of your PHI have been violated, you may file a complaint with EverCare or with the Office of Civil Rights. Complaints about this notice or our handling of your PHI should be submitted in writing to the contact person listed below.

A complaint to the Office of Civil Rights should be sent to the Office of Civil Rights, U.S. Department of Health & Human Services at 200 Independence Ave., S.W., Room 509F, HHH Building, Washington, D.C. 20201, or email OCRComplaint@hhs.gov, or call (800) 368-1019. You can also visit OCR’s website for more information at: https://www.hhs.gov/ocr/index.html

You will not be penalized or in any other way retaliated against for filing a complaint with us or the Office of Civil Rights.

SEND ALL WRITTEN REQUESTS REGARDING THIS PRIVACY NOTICE TO:

EverCare Mobile Health

1047 S Wells St, Ste 106

Meridian, Idaho 83642

Phone: (208) 297-3428

Email: office@evercaremobile.com

Para asistencia en Espanol, llame al numero de servicio.

This document is available in alternative formats upon request and at no cost to people with disabilities.