1. Information We Collect
CareOS collects the following categories of information:
- Personal Identifiers: Name, email, phone number
- Protected Health Information (PHI): Vital signs, medications, diagnoses, treatment plans
- Usage Data: SMS interactions, check-in responses, appointment records
- Device Information: Phone type, carrier (for SMS delivery optimization)
2. How We Use Your Information
- Provide healthcare coordination services via SMS and web
- Monitor vital signs and send health alerts
- Coordinate with your care team and emergency contacts
- Process insurance verification and DME requests
- Improve our services through anonymized analytics
3. HIPAA Compliance
CareOS is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA). We implement:
- AES-256-GCM encryption for all PHI at rest
- TLS 1.3 encryption for all data in transit
- Role-based access controls for care team members
- Comprehensive audit logging of all PHI access
- Business Associate Agreements with all third-party service providers
- Regular security assessments and penetration testing
4. Data Sharing
We share your information only with:
- Your designated care team members (with your consent)
- Emergency contacts (during emergency events)
- Healthcare providers you authorize via profile sharing
- Service providers under BAA (Twilio for SMS, cloud hosting)
We never sell your health data.
5. Your Rights
- Access your health records at any time
- Request correction of inaccurate information
- Request deletion of your account and data
- Opt out of SMS communications at any time (text STOP)
- Receive a copy of your data in portable format
- File a complaint with HHS Office for Civil Rights
6. Data Retention
We retain your health information for the duration required by applicable law (minimum 6 years for HIPAA). You may request deletion of non-required data at any time.
7. Contact Us
For privacy inquiries or to exercise your rights:
Privacy Officer: privacy@careos.health
HIPAA Complaints: compliance@careos.health