MyHealth Privacy Policy
Last updated: January 8, 2025
Overview
Stanford Health Care takes seriously its obligation to protect the confidentiality of your personal information. This Privacy Policy applies to the MyHealth mobile application, website, and related services (“MyHealth” or “Services”). This Privacy Policy incorporates Stanford Health Care’s Notice of Privacy Practices (English version / Spanish version) and includes the following supplemental terms. The Notice of Privacy Practices and these supplemental terms are collectively this “Privacy Policy.”
By using MyHealth, you acknowledge the practices and policies outlined in this Privacy Policy. You acknowledge that we will collect, use and share your information as described in this Privacy Policy. This Privacy Policy is not a contract and does not create any contractual rights or obligations. Your use of MyHealth is governed by our Terms and Conditions of Use.
Information Collected
We collect Personal Information that you enter into MyHealth. For example, we collect:
- Information you provide to create your MyHealth account, such as your name, email address, zip code, phone number, profile picture, and other demographic information;
- Payment information that you provide;
- Insurance information that you provide;
- Questionnaire responses that you provide;
- Location information, if you consent and activate some services; and
- Any communications and media that you provide or send through MyHealth.
MyHealth may automatically collect usage data, such as your use of MyHealth and information from your device. For example, we may collect information on your IP address, your device’s model and manufacturer, location information, MAC address, web browser, and operating system, performance issues, and your activity on MyHealth, including whether you have reviewed materials and communications on MyHealth.
With your permission, certain versions of the MyHealth mobile application can connect to Apple HealthKit or Google Fit to collect health information. MyHealth does not share your health information with Apple HealthKit or Google Fit.
How We Use Your Information
We may use your Personal Information for the following purposes:
a) To verify your identity, register you for MyHealth, and allow you to access MyHealth;
b) To provide the services associated with MyHealth;
c) To communicate with you (including email, text messages and push notifications sent to your phone) and to solicit feedback;
d) To evaluate the effectiveness of MyHealth and to improve MyHealth;
e) To investigate or prevent actual or suspected fraud, criminal activity, injury or damage to us or others;
f) When required by statute, regulation, other law, subpoena, court order, warrant, or similar legal process;
g) To display our nearest health care facilities, to help you navigate within the hospital, to notify front desk staff of your arrival, or to suggest health care providers near to you; and
h) To assert or protect our rights or assets, if necessary.
We may also de-identify your personal information (“de-identified information”). De-identified information is not personal information, because it cannot generally be used to identify you, and may be used by Stanford for any lawful purpose. Despite our rigorous de-identification process, which includes removing identifiers that reasonably can be used to identify you directly (such as name or telephone number), experts in re-identification may be able to re-identify you if given sufficient cross-reference information. Consequently, total anonymity cannot be guaranteed.
Native Applications on Mobile Device
MyHealth may use certain native applications on your mobile device, such as the camera, microphone, storage, etc. Before engaging these features, you will be asked to consent to their use. You can change your selection at any time in the general settings of your mobile device. Please note: disabling access to these applications may cause some MyHealth features to no longer function.
Native applications
1
Camera |
1
We may use your camera to take new photos or to capture and transmit video for telehealth visits. You choose if you want to use photos to personalize your account or send them as file attachments when you send messages to your health care providers. Photos sent as file attachments in a MyHealth message are saved to your Stanford Health Care medical record. We do not store video or images from telehealth visits. |
1
Microphone |
1
We may use your microphone to capture audio for telehealth visits. We do not store your audio data from these visits. |
1
Storage |
1
We may access your device's storage to read and write files and photos that you select in MyHealth. These files and photos may be attachments sent by you or received by you. Files and photos sent or received as attachments in a MyHealth message are saved to your Stanford Health Care medical record. We may use your storage to write a file containing a list of Stanford Health Care providers for ease of search in MyHealth without internet access. |
1
Bluetooth |
1
We may access your device's Bluetooth to detect other nearby devices. This information will be used to notify front desk staff when you arrive for an appointment if you choose to activate this service. We detect your arrival in our clinics by monitoring for a low power Bluetooth signal (BTLE). We do not store your Bluetooth data. |
1
Location Services |
1
If you choose to use certain services, we may use your location data to notify front desk staff when you arrive for an appointment or to suggests health care providers that are near you. MyHealth will not store your location data. You can always change your location preferences in MyHealth Account Settings or on your device. Sharing of location information is not required to use MyHealth. |
1
Phone Calls |
1
We may use your phone to call phone numbers displayed in MyHealth. We will not store your call history or other call data. |
Sharing Your Personal Information
We may share your personal information (1) for the reasons we tell you when we collect it, (2) according to authorization or consent or at your direction, or (3) when we believe disclosure is necessary to protect the safety, rights or property of Stanford or the public.
Children’s Information
We do not knowingly collect or solicit personal information from anyone under the age of 13 or knowingly allow such persons to register for MyHealth. If you are under 13, do not attempt to register for MyHealth and do not send your information to us. If we learn that we have collected personal information from a person under age 13, we will delete the information. If you believe that we might have information from or about a person under the age of 13, please contact us at PrivacyOfficer@stanfordhealthcare.org.
Information Security
The security of your information is very important to us. We employ a variety of technical safeguards to protect the confidentiality, integrity, and availability of your personal information within MyHealth including supporting Transport Layer Security (TLS)/Secure Sockets Layer (SSL) certificate technology and encryption. In addition, we protect the Stanford systems that MyHealth connects with using a variety of physical, administrative and technical measures. However, we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of your personal information at any time.
Using a variety of physical, administrative and technical measures, we will take all reasonable steps to protect your privacy in accordance with the applicable U.S. data protection laws. You acknowledge that the laws of the United States may not protect your privacy to the same extent as the laws in the country from which you are accessing MyHealth.
Stanford Health Care does not share your personal information with anyone besides our third-party service providers, who have separate agreements with us.
Your Choices
Your choice to use MyHealth and use the related Services is completely voluntary. But if you choose not to register and use MyHealth, you will not be able to use the MyHealth services, including viewing your appointments and selected medical record, or communicating with your provider.
Do Not Track Signals
MyHealth does not respond to Do Not Track signals. Currently, there is no universally accepted technological or regulatory standard for recognizing or honoring Do Not Track signals. Once such technology is created and has received applicable regulatory approval, we will consider (a) whether it is possible; and (b) if so, how it can be incorporated within MyHealth in the future.
Updates to Your Personal Information
You may access, and in some cases, edit or delete your user profile information and/or account. Please note that deleting your MyHealth account will not alter, delete or otherwise affect your SHC medical record which is maintained in accordance with California law. Also, if you have granted any proxies access to your medical record, they will continue to have access if you delete your MyHealth account.
You may request a correction to your data by contacting us at 1-866-367-0758 or through this webpage. Please do not include any health information in your messages. When you update or delete information, we may maintain a copy of the unrevised information in our records. Please note that while any changes you make will be reflected in active user databases within a reasonable period of time, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so, as permitted by applicable law.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our programs and practices. The updated Privacy Policy is effective when posted to the Stanford Health Care website. Our use of personal information is subject to the then-current version of the Privacy Policy. Your use and continued use of MyHealth reflects your agreement to this Privacy Policy and any modifications of the policy made by Stanford Health Care.
Contact Us
If you have questions or concerns regarding this Privacy Policy, you may contact us by email at PrivacyOfficer@stanfordhealthcare.org.