Privacy Policy | NPConnect

Michael D Griffin, APRN, LLC ("NPConnect," "we," "us," or "our") respects your privacy and is committed to protecting your personal and health information. This Privacy Policy explains how we collect, use, and share information through our telehealth platform and mobile application (the "Services").

1. Information We Collect

Personal Information: Name, date of birth, email address, phone number, mailing address, and emergency contact details.

Health Information: Medical history, current medications, allergies, chronic conditions, symptoms, consultation notes, and any documents you upload (such as insurance cards or lab results).

Payment Information: Billing details processed securely through our third-party payment processor, Stripe. We do not store full card numbers on our servers.

Usage Information: Device identifiers, approximate location, and interaction data with the Services.

2. How We Use Your Information

To provide telehealth consultations, schedule appointments, and deliver care.
To create and maintain your medical records and treatment history.
To process payments and manage billing.
To send appointment reminders, follow-up instructions, and service notifications.
To respond to your inquiries and provide customer support.
To comply with legal and regulatory obligations.

3. HIPAA Notice

We maintain the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA). We will not use or disclose your PHI without your written authorization, except as permitted or required by law. A separate Notice of Privacy Practices is available upon request and is presented during the patient intake process.

4. How We Share Your Information

We may share your information with:

Service providers: Trusted vendors who support our operations (e.g., payment processing, calendar scheduling, hosting), under agreements that protect the confidentiality of your data.
Your other providers: When you authorize a medical records release through the platform.
Legal authorities: When required by law, court order, or to protect the rights, property, or safety of others.

We never sell your personal or health information.

5. Data Security

We use administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, or loss. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal and health information for as long as necessary to provide services and as required by applicable medical record retention laws.

7. Your Rights

Depending on your state of residence, you may have the right to:

Access the personal and health information we hold about you.
Request corrections to inaccurate or incomplete information.
Request deletion of your personal information, subject to legal record-keeping requirements.
Withdraw consent for certain uses of your data.

To exercise any of these rights, contact us using the details below.

8. Children's Privacy

Our Services are not directed to children under 18 without the consent of a parent or legal guardian. We do not knowingly collect information from minors without such consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a revised "Last updated" date. Continued use of the Services after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact Michael D Griffin, APRN, LLC through the contact options available in the app or patient portal.