Consumer Health Data Privacy Policy

This policy applies to “consumer health data” as defined by Washington’s My Health My Data Act, Nevada consumer-health-data law, and similar laws. It may include information that identifies or can reasonably be linked to a consumer and relates to past, present, or future physical or mental health.

This policy does not apply to information exempt from those laws, including PHI governed by HIPAA where the exemption applies.

Depending on your interaction, Everdawn may collect health conditions, symptoms, diagnoses you report, treatment interests, medications, measurements, laboratory interests or results, reproductive or sexual-health information, mental-health information, biometric or genetic information, health goals, precise location where intentionally provided for care, and inferences about health status.

We collect only the categories reasonably necessary for the purposes disclosed at collection or with consent.

Consumer health data may come directly from you; from devices or services you connect; from Partner Medical Practices as permitted by law; from laboratories, pharmacies, and care partners involved at your request; or from processors acting on our instructions.

We collect and use consumer health data to provide requested services, determine administrative eligibility, connect you with appropriate providers, support care coordination, process transactions, communicate with you, maintain security, prevent fraud, comply with law, and improve services using aggregated or de-identified information.

We will obtain affirmative consent where required before collecting or using consumer health data for a materially different purpose.

We may share consumer health data with Partner Medical Practices and licensed providers; processors supporting hosting, security, scheduling, communications, payments, and customer support; laboratories, pharmacies, device services, and other partners you request; professional advisers; authorities where legally required; and other recipients with your consent.

We require processors to handle consumer health data under contractual restrictions appropriate to their role.

Everdawn does not sell consumer health data. If that practice changes, we will obtain separate authorization where required before a sale.

Everdawn does not use a geofence around health care facilities to identify, track, collect data from, or send health-related messages or advertising to consumers as prohibited by applicable consumer-health law.

Subject to applicable law, you may request confirmation of whether we collect or share consumer health data; access to that data and a list of relevant third parties; withdrawal of consent; deletion; and review or appeal of a denied request.

Submit requests or appeals to privacy@everdawn.health. We may verify your identity and will respond within the time required by law. Deleting information from active systems may not immediately remove copies maintained in backups, and legally required retention may continue.

We restrict access to consumer health data to personnel, processors, and partners with a legitimate need and use safeguards designed to protect confidentiality, integrity, and availability. We retain data only as reasonably necessary for the disclosed purposes and applicable legal obligations.

We will not materially change collection, use, or sharing practices in a manner inconsistent with this policy without the notice or consent required by law. Contact privacy@everdawn.health with questions.