HIPAA Notice

About This Notice

This page explains how the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") applies to your use of the Service operated by Baseline RX ("BaselineRx").

BaselineRx Is Not a HIPAA Covered Entity

BaselineRx provides the technology platform you use to access telehealth services. BaselineRx is not a "covered entity" under HIPAA. Information you provide to BaselineRx for purposes of creating and maintaining your account — such as your name, email address, shipping address, and phone number — is not "protected health information" under HIPAA.

However, in connection with the medical services you receive through the Service, you may share information that is protected under HIPAA or under applicable state privacy laws. That information is governed by your Medical Group's Notice of Privacy Practices, not this page.

Your Medical Group's Notice of Privacy Practices

The Medical Groups and Providers who deliver medical services through the Service are separate from BaselineRx. They have adopted their own Notice of Privacy Practices ("Notice of Privacy Practices" or "NPP") that describes how they collect, use, and disclose your protected health information.

You receive the Medical Group's Notice of Privacy Practices when you create your patient account and complete your first medical consultation through the Service. By accessing or using any part of the Service, you acknowledge receipt of the Notice of Privacy Practices from your Medical Group and Provider(s).

If you have questions about the Medical Group's Notice of Privacy Practices, or you need a copy, please contact your Medical Group through the patient portal or contact us at hello@reply.baseline-rx.com and we will help you obtain one.

BaselineRx as a Business Associate

In some cases, BaselineRx may act as a "business associate" of a Medical Group or Pharmacy under HIPAA. In that role, BaselineRx may receive, store, or transmit protected health information on behalf of the Medical Group or Pharmacy. When BaselineRx acts as a business associate, it uses and discloses that information only in accordance with the applicable Business Associate Agreement and HIPAA.

What Is Protected Information

For purposes of this notice and the BaselineRx Privacy Policy, "Protected Information" includes:

• "Protected health information" as defined by HIPAA, when applicable
• Health or medical information that is subject to specific protections under applicable state laws

Protected Information does not include information that has been de-identified in accordance with HIPAA or applicable state laws.

State Privacy Laws

In addition to HIPAA, several states have laws that protect consumer health data outside of HIPAA. These laws may give you additional rights — including rights to access, correct, delete, and withdraw consent for the use of your consumer health data. For information about how BaselineRx handles consumer health data under these state laws, please see our Consumer Health Data Privacy Policy.

How to Reach Us

If you have any questions about this HIPAA Notice or about how BaselineRx handles your information:

Email: hello@reply.baseline-rx.com

Mail:

Baseline RX

418 Broadway #10762

Albany, NY 12207

If you have questions specifically about the medical care you receive or about the Medical Group's privacy practices, please contact your Medical Group through the patient portal.

Note: This page explains how HIPAA applies to BaselineRx's role as a technology platform. It is not the same as your Medical Group's Notice of Privacy Practices, which is a separate document delivered to you at the start of your patient relationship with the Medical Group.