Consumer health data privacy.
Draft for legal review · Effective date to be set at launch
What this policy covers
This policy explains how Verra Health handles consumer health data: information that identifies you and relates to your past, present or future physical or mental health. It applies alongside our Privacy Policy and HIPAA Notice of Privacy Practices, and supplements them for residents of states with consumer health data laws, including Washington (My Health My Data Act), Nevada and Connecticut.
Health data we collect
Answers to visit questions, conditions, symptoms and medications you tell us about, photos you upload for review, prescriptions and treatment history, messages with your care team, and payment records connected to treatment. We also collect device and usage data on our site, but we do not connect page views to your identity or health details.
Why we collect it
To provide telehealth visits, let licensed providers make treatment decisions, fill and ship prescriptions, bill you, keep records the law requires, keep the service safe and respond to your requests. We do not use health data for advertising.
Who we share it with
Your treating providers and our partner pharmacy, service providers bound by contract (such as hosting and secure messaging), payment processors (which receive only payment details and IDs, never your health answers), and authorities when the law requires. We do not sell consumer health data and do not share it with advertising or social media platforms.
No ad trackers
We do not place advertising or social media pixels on visit, account, quiz-result or condition pages. Optional analytics are first-party, anonymous and contain no health details.
Your rights
You can confirm whether we hold your health data, see it, get a copy, ask us to delete it, and withdraw consent. You can request these from your account (Profile → Download my data / Delete account) or by contacting privacy support. Some records must be kept by law (for example prescription records); we'll tell you if that applies. You may appeal a decision by replying to our response.
Geofencing
We do not use geofences around health care facilities to collect data or send messages.
Contact
Questions or requests: use Messages in your account or the contact options on our site. We respond within 45 days, as required by applicable law.