Privacy Policy

EBM CareConnect (“the App”) is provided by EBM Health Care Strategies to support the care you receive from your clinicians and care team. The App is published on the App Store and Google Play by Studio Blue Creative, Inc. on EBM’s behalf. This policy explains what information the App handles, how it is used and protected, and the choices you have.

EBM Health Care Strategies and its partner practices are HIPAA “covered entities.” Your health information in CareConnect is protected health information (PHI) and is handled under HIPAA and this policy. If anything here conflicts with the Notice of Privacy Practices your provider gave you, that Notice governs your PHI.

Information we collect

Account information

• Your name and email address, and (if provided by your care team) phone number and the practice you’re enrolled with.
• Sign-in credentials — passwords are stored only as salted, hashed values; we never store them in readable form.

Health information you provide

• Daily check-in answers, symptom and activity responses, and Hybrid Oximetry results made available by your care team.
• Consent forms you review and sign in the App.
• Messages you exchange with your care team.

Device & technical information

• A push-notification token and device identifier used only to deliver reminders you opt into.
• Basic app and diagnostic information (app version, error/crash data) used to keep the App reliable.

We do not use advertising identifiers, third-party ad trackers, or analytics that build a marketing profile of you.

How we use your information

• To provide the App: show your check-ins, progress, results, documents, and care-team messaging.
• To support your care — your responses are shared with your assigned care team so they can monitor and support you between visits.
• To send reminders and notifications you choose to enable. Health details never appear in a notification.
• To secure the service, prevent abuse, and meet legal and regulatory obligations.

How we share information

• Your care team — clinicians and staff at EBM and your enrolled practice who are involved in your care.
• Service providers — vendors that host and operate the App under contracts (including HIPAA Business Associate Agreements) that require them to protect your information and use it only to provide services to us.
• Legal — when required by law or to protect safety, rights, or security.

We do not sell your personal or health information, and we do not share it for advertising.

How we protect your information

• Encryption in transit (HTTPS/TLS) and encryption of sensitive fields at rest.
• Role-based access controls, audit logging of access to health records, and least-privilege database accounts.
• Optional biometric (Face ID / Touch ID / fingerprint) lock on supported devices.

No system is perfectly secure, but we work to protect your information consistent with HIPAA’s Security Rule.

Your rights & choices

• Access & correction — you may request a copy of, or a correction to, the information we hold about you.
• Notifications — you can turn reminders on or off at any time in your device settings or in the App.
• Account & data deletion — you can ask us to delete your account and associated data (see below). Some records may be retained where required by law or for legitimate clinical/record-keeping obligations.

Deleting your account

Email support@ebmhcs.com (or use the Help Center) from the address on your account and ask us to delete it. We’ll confirm and process your request, subject to legal retention requirements.

Data retention

We keep your information for as long as your account is active and as needed to provide the App and support your care, and thereafter as required by law and medical record-retention rules. When no longer required, information is deleted or de-identified.

Children

The App is intended for use by patients enrolled through their care team and is not directed to children under 13. Where a minor is enrolled, access is managed by their care team and guardian.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Effective” date above and, where appropriate, communicated in the App.

Contact us

Questions about this policy or your information:

• Email: support@ebmhcs.com
• Help Center: cc.ebmcare.com/support
• EBM Health Care Strategies — Privacy