Health Data Privacy Notice

"Health information" includes intake responses, medical and medication history, symptoms, photos, lab results, clinician notes, prescriptions, shipment history, and any messages between you and your clinician. Some of this information is Protected Health Information ("PHI") under HIPAA when it is created, received, or maintained by a healthcare provider or their business associates.

Clinicians. Independent, US-licensed clinicians who evaluate your intake and provide care act as HIPAA-covered healthcare providers.

Pharmacy partners. PCAB-accredited compounding pharmacies and other licensed pharmacies that fill prescriptions.

Taggs. Taggs provides the technology platform that supports these providers and acts as a business associate under HIPAA where applicable.

To evaluate and treat you; to issue, fill, and ship prescriptions; to coordinate follow-up care; to contact you about your treatment; to operate, secure, and improve the platform; to bill and collect payment; and to comply with legal, regulatory, and medical-record retention requirements.

We share health information with the clinicians who treat you and the pharmacies that fill your prescriptions; with service providers under contracts that require appropriate safeguards; with shipping carriers to deliver medication; with public authorities when required by law (for example, to report adverse events); and with others only with your written authorization.

We do not sell your health information. We do not use PHI for third-party advertising.

Subject to applicable law, you may: request access to and a copy of your medical record; request corrections; request an accounting of certain disclosures; ask us to restrict certain uses or disclosures; request confidential communications; and revoke a prior authorization. To exercise these rights, contact us through our contact page.

Some states (for example, California, Washington, and Nevada) provide additional protections for consumer health data collected outside the traditional healthcare context. Where those laws apply, we honor the additional rights they provide, including opt-outs from certain data sales or targeted advertising involving consumer health data. We do not engage in sales of health data or use it for targeted advertising.

We use administrative, technical, and physical safeguards — including encryption in transit, access controls, and monitoring — designed to protect your health information. No system is 100% secure, and we cannot guarantee absolute security.

Medical records are retained for the period required by the state where your clinician is licensed and by applicable federal law. Records may be retained longer where necessary to comply with legal obligations or defend legal claims.

If a breach of your unsecured PHI occurs, we and the applicable covered entity will notify you as required by HIPAA and state law.

We may update this Notice. Material changes will be posted here with an updated "Last updated" date.

Questions about this Notice or your health information? Reach us through our contact page.