Drs on Calls HIPAA Notice of Privacy Practices
Drs on Calls
HIPAA Notice of Privacy Practices
Effective Date: September 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
1. Who This Notice Applies To
This Notice is provided by the independent, licensed healthcare providers and their professional practices who deliver care through the Drs on Calls platform ("Medical Provider Partners," "we," "us"). Medical Provider Partners are the healthcare providers responsible for your care and for protecting your health information under the Health Insurance Portability and Accountability Act (HIPAA).
Drs on Calls LLC ("Drs on Calls") is a technology company, not a healthcare provider. Drs on Calls operates the website and mobile applications (the "Platform") and provides technology, scheduling, billing, and administrative services to Medical Provider Partners. When Drs on Calls handles your health information for these purposes, it acts as a "business associate" under a written agreement that requires it to protect your information and use it only as permitted by HIPAA.
This Notice covers your "protected health information" (PHI): information that identifies you and relates to your health, the care you receive, or payment for that care.
2. Our Responsibilities
We are required by law to maintain the privacy and security of your PHI.
If a breach occurs that compromises the privacy or security of your unsecured PHI, you will be notified without unreasonable delay and no later than 60 days after the breach is discovered. The breach will also be reported to the U.S. Department of Health and Human Services and, where required, to state regulators.
We must follow the duties and privacy practices described in this Notice and give you a copy of it.
We will not use or share your information other than as described here unless you tell us we can in writing. If you give us permission, you may change your mind at any time by letting us know in writing.
3. How We Protect Your Information
Medical Provider Partners and Drs on Calls use administrative, physical, and technical safeguards to protect your PHI, including:
Encryption of health information sent through the Platform's video, audio, and messaging features, and of health information stored on the Platform.
Access controls, so only authorized personnel who need your information to do their jobs can view it.
Audit logs that record when your medical records are accessed or changed.
Workforce privacy and security training, and written agreements with every vendor that handles PHI.
No system is completely secure, but we continually review and update these safeguards.
4. How We Use and Share Your Health Information
We typically use or share your PHI in the following ways, without your written authorization:
Treatment. We use and share your PHI to evaluate and treat you, including sharing it with other providers involved in your care. For example, your intake answers, medical history, and records are shared with the treating Provider (such as a physician assistant or nurse practitioner) and their supervising or collaborating physician. A Provider may also send a prescription to your pharmacy, order a lab test, or send a visit summary to your primary care provider at your request.
Payment. We use and share your PHI to bill and collect payment for your care. For example, Drs on Calls processes your payment on behalf of your Provider through a secure payment processor that uses tokenization, so your full card number is not stored on the Platform, and that is contractually required to protect your data. Because we do not bill health insurance, we generally do not share your PHI with health plans unless you ask us to.
Healthcare Operations. We use and share your PHI to run our practices, improve care quality, train staff, conduct audits, and operate the Platform securely. For example, we may review visit records to check the quality of care, and Drs on Calls may run software quality and security audits to make sure the Platform performs safely.
Reminders and Communications. We may use your contact information to send appointment reminders, visit summaries, and information about your care by email, text message, or in-app notification.
Business Associates. Business associates such as Drs on Calls, secure hosting providers, e-prescribing networks, and payment processors may receive your PHI to perform services for us. Each must sign an agreement to protect it.
5. Other Uses and Disclosures Permitted or Required by Law
We may also use or share your PHI without your authorization, in limited circumstances and only as permitted by law, for the following:
When required by federal, state, or local law.
Public health and safety activities, such as preventing disease, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence, and preventing a serious threat to anyone's health or safety.
Health oversight activities, such as audits, investigations, and licensure actions by government agencies.
In response to a court or administrative order, subpoena, or other lawful process.
To law enforcement officials, as permitted by law.
To coroners, medical examiners, or funeral directors, and for organ and tissue donation requests.
For workers' compensation claims.
For specialized government functions, such as military, national security, and presidential protective services.
For research that has been approved through a process that protects your privacy.
To the U.S. Department of Health and Human Services, if it wants to see that we are complying with federal privacy law.
6. Your Choices
You have the right to tell us your preference in the following situations. If you are not able to tell us, for example if you are unconscious, we may share your information if we believe it is in your best interest, or when needed to lessen a serious and imminent threat to health or safety.
Sharing information with family, close friends, or others involved in your care or payment for your care.
Sharing information in a disaster relief situation.
7. Uses That Require Your Written Authorization
We will never share your PHI for the following purposes unless you give us written permission:
Marketing purposes.
Sale of your information. We do not sell your health information.
Most sharing of psychotherapy notes.
Other uses and disclosures not described in this Notice will be made only with your written authorization. You may revoke an authorization at any time in writing, except to the extent we have already acted on it.
8. Sensitive Information and State Law
Some types of information, such as mental health, substance use disorder treatment records, HIV/AIDS and other sexually transmitted infection information, genetic information, and reproductive health information, may have additional protections under federal or state law. Where state law gives you greater privacy protection than HIPAA, we will follow the stricter law.
9. Your Rights
Get a copy of your medical record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide a copy or a summary, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
Ask us to correct your record. You can ask us to correct health information you think is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days.
Request confidential communications. You can ask us to contact you in a specific way (for example, by a particular phone number or email) or to send mail to a different address. We will agree to all reasonable requests.
Ask us to limit what we use or share. You can ask us not to use or share certain health information for treatment, payment, or operations. We are not required to agree, and may say no if it would affect your care. If you pay for a service in full out of pocket, you can ask us not to share that information with your health insurer, and we will agree unless a law requires us to share it.
Get a list of those with whom we have shared information. You can ask for a list of the times we have shared your health information in the six years before your request, who we shared it with, and why. This list will not include disclosures for treatment, payment, and operations, and certain other disclosures. We provide one list a year free and may charge a reasonable, cost-based fee for additional lists within 12 months.
Get a copy of this Notice. You can ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically.
Choose someone to act for you. If you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will confirm the person has this authority before we take any action.
10. How to Exercise Your Rights or File a Complaint
To exercise any of these rights, contact our Privacy Officer using the information below. Requests may need to be made in writing.
If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, by sending a letter to 200 Independence Avenue S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
We will not retaliate against you for filing a complaint.
11. Changes to This Notice
We may change the terms of this Notice, and the changes will apply to all information we have about you. The new Notice will be available on the Platform, on our website, and by request. If we make a material change, we will ask you to review the updated Notice before your next visit.
12. Contact Information
Email: support@drsoncalls.com
Phone: 1-800-652-5580
Website: www.Drs on Calls.com
13. Acknowledgment of Receipt
By checking the acknowledgment box, I confirm that I have received and had the opportunity to review this Notice of Privacy Practices.
