POC health-record access notice

1. What is happening

You are asking this application to retrieve your own health records through a third-party interoperability service that connects to TEFCA and other health information networks. This is an Individual Access Services (T-IAS) request — you requesting your own records — not a treatment query.

2. Vendors involved

• Fasten Health — when you select the Fasten flow. Fasten operates the QHIN connection and the identity-proofing handoff.
• Health Gorilla — when you select the Health Gorilla flow.
• Identity verification provider — CLEAR, ID.me, or Persona, as offered by the selected vendor, verifies your identity to IAL2.

3. What data may be retrieved

Electronic health information held by participating healthcare organizations. Depending on what each source returns, this can include diagnoses, encounters, clinical notes and documents, laboratory results, medications, procedures, imaging and pathology reports, and demographics.

4. Why we are retrieving it

Solely to evaluate whether patient-authorized nationwide record retrieval works, and to assess how complete the returned records are. No other purpose.

5. Where it goes

Retrieved records are delivered to Unite's backend storage for this evaluation. They are encrypted at rest with AES-256-GCM and are not transmitted to any other destination.

6. Who can access it

The tester whose records these are, plus the named internal engineering personnel required to operate the test. Access requires authentication to this application.

7. Retention

Retrieved records are deleted no later than 30 days after retrieval, or immediately on request, whichever comes first. Run metadata and audit records (which contain no clinical content) are retained for the duration of the evaluation.

8. Deletion and revocation

You may delete the stored copy and revoke future access at any time from the Delete & revoke page, or by emailing support@uniteyourhealth.com. Deletion removes the stored export; the audit record that a deletion occurred is retained.

9. Third-party sharing

No downstream processor receives this data. It is not sold, shared, or disclosed to any party beyond the vendors listed in section 2 that are necessary to perform the retrieval.

10. AI and machine learning

No AI or ML system processes records imported through this POC. If that ever changes, this notice will be updated and consent re-collected before any such processing occurs.

11. Marketing

Records retrieved through this POC are never used for advertising or marketing.