Baptist OneCare Privacy Policy

This Privacy Policy applies to personal information obtained through the Baptist MyChart mobile application and website, https://mychart.baptistonecare.org, (collectively, "Baptist OneCare"), which are operated by Baptist Memorial Health Care Corporation on behalf of its affiliated health care facilities ("Baptist"). This Privacy Policy explains our practices and governs the use of personal information Baptist collects from you or about you through Baptist OneCare.

By downloading, using, creating an account, or registering through Baptist OneCare you agree to this Privacy Policy and consent to the collection and use of your personal information as described in this Privacy Policy.

1. Information We Collect

   A. Information You Submit

   We, and our vendors, may obtain personal information that you provide to us directly, for example, data you submit when you complete forms, fill out questionnaires, schedule in-person or telehealth video call appointments, request prescription refills, add or change pharmacies, add personal notes, enroll in research studies, send messages to your care team, or make payments. Personal information we, and our vendors, collect may include your nickname, account credentials, email address, phone number, insurance coverage information (including insurance card photos), vaccine documentation, health-related information, and payment processing information.

   
   If you submit the personal information of another person, you represent that you have obtained the authorization from that person to submit such personal information to us.

   B. Information We Collect Automatically

   In addition to any personal information or other information that you choose to submit through Baptist OneCare, we and our vendors use a variety of tracking technologies that automatically or passively collect certain information whenever you interact with Baptist OneCare. This type of usage information may include the device you are using, your IP address, device ID, other unique identifier, geolocation, crash analytics, all of the areas within Baptist OneCare that you visit, and the time of the visit.

   Baptist OneCare may be personalized based on various information we may have about you to provide you with more location-relevant content. We may use GPS (global positioning systems) software, geo-filtering, and other location-aware technologies to locate you, sometimes precisely, for purposes such as verifying your location and delivering or restricting content based on your location. Our clinic location feature may access and use information about your device location to suggest appropriate clinic locations. Additionally, you may change your preferences regarding our "Appointment Arrival" feature, which uses your phone's location to notify front desk staff when you've arrived. You may use your device settings to change your geolocation preferences.
   We may combine certain automatically-collected information with other information we obtain about you, which may include data we obtain from third parties.
   We or third parties, including our vendors, may collect personal information about your online activities over time and across different online services when you use Baptist OneCare.

2. App Permissions

   Depending on your device or App permission settings, the App may have access to the following information from your device:

   1. Location: Location data may include your precise or approximate location.
      - How we use your location data: Baptist OneCare may use your location data to notify the front desk staff of your arrival for appointments. We will not store your location data.
   2. Stored Information and Photos/Media/Files: The App may be able to read, modify, or delete the contents of your USB storage.
      - How we use your device's storage: Baptist OneCare may access your device's storage to read and write files and photos you choose to use in the app. You can use photos and files to personalize your account, send or download attachments in your messages to healthcare providers, or upload your insurance card information
   3. Camera: Your camera may allow the App to take photos and videos.
      - How we use your camera: Baptist OneCare may use your camera to share your video during a video visit and take photos that you choose to use in the app. You can use photos to personalize your account, send as attachments in messages to your healthcare providers, or upload your insurance card information.
   4. Microphone: The App may record audio.
      - How we use your microphone: Baptist OneCare may use your microphone to capture audio for video visits. We will not store your audio data.
   5. Bluetooth: The App may use your Bluetooth to connect to health devices.
      - How we use your Bluetooth: Baptist OneCare may access your device's Bluetooth to notify front desk staff when you arrive for an appointment. We will not store your Bluetooth data.
   6. Phone: The App may directly call phone numbers.
   7. Other information:
      
      • How we may use other information: For example, the App may be able to
      • Receive data from the Internet
      • Prevent your device from sleeping
      • Control vibration
      • Pair with Bluetooth devices and access Bluetooth settings
      • Change your audio settings
      • View your network connections, obtain full network access, and at startup.
      • These App permission settings allow you to access or use certain features within the App. For example, for telehealth services, the App may need access to your camera and microphone. By changing your App permission settings, you may affect your ability to access or use certain features on the App.
      • Additionally, you may be able to log into the App using your device's log in features such as using a passcode or your fingerprint. These device log in features are facilitated through your device and not Baptist OneCare and we have no control over such features, which you can change by accessing your device settings and preferences.

3. How We Use The Information We Collect

   We use your information for many purposes, such as to: (i) provide various products or services to you, including by processing your payments; (ii) analyze trends and conduct research about improving our products and services; (iii) provide support and respond to questions and/or messages; (iv) improve Baptist OneCare products or services; (v) learn about users' needs; (vi) contact users for research, informational, and marketing purposes; (vii) track traffic patterns and Baptist OneCare usage; (viii) provide customer service; (ix) correlate information with other commercially available information to identify demographics and preferences to assist us in our marketing efforts; (x) provide specific relevant marketing, promotional, or other information to you; (xi) address information security and/or privacy issues, network functioning, and troubleshooting; (xii) investigate claims and/or legal actions, violations of our policies and procedures, and compliance with relevant applicable laws and legal process; (xiii) comply with applicable laws, regulations, or legal process as well as industry standards and our company policies; or (xiv) prevent, investigate, identify, or take any other action with regard to suspected or actual fraudulent or illegal activity, or any activity that violates our policies.

   We will store your personal information for no longer than is necessary for the performance of our obligations or to achieve the purposes for which the information was collected, or as may be permitted under applicable law.

4. Sharing Of Your Information

   Personal information submitted to Baptist OneCare, such as your communications with your health providers, may be shared with our service provider, Epic, and added to your medical record. Once part of your medical record, this personal information may be considered protected health information, as governed by the Health Insurance Portability and Accountability Act and applicable state law. For more information on such protected health information, please refer to our Notice of Privacy Practices.
   
   We may share your personal information in the event we sell or transfer all or a portion of our business assets (e.g., further to a merger, reorganization, liquidation, or any other business transaction), including negotiations of such transactions.
   
   We may also share your personal information at your direction. For example, you may share your information with friends, family, other individuals, or other healthcare organizations. You may adjust your sharing preferences through Baptist OneCare. Note that if you choose to provide access to your information to friends or family through the proxy access feature, they may obtain full access to the information you have access to yourself on Baptist OneCare. You may also choose to link your Baptist OneCare account to other healthcare systems.
   
   We may also share certain information to other devices or applications as per your preferences. Connecting to other devices or applications, such as Apple HealthKit or Google Fit, may entail sharing information between Baptist OneCare and such devices related to the device's technologies or features (e.g., thermometers, blood pressure calculators, weight measuring).
   
   Information, including personal information, may also be shared: (i) as permitted by law; (ii) where we determine that disclosure of specific information is necessary to comply with the request of a law enforcement or regulatory agency or other legal process; (iii) to enforce our policies, or to protect legal rights, property, or safety; or (iv) in compliance with Baptist policies and procedures.
   
   From time to time we may enter into an arrangement with another company that is not owned by or affiliated with us to provide additional features on Baptist OneCare. These arrangements may include business partners, sponsors, and co-branded online services (referred to here as "co-branded services"). Any information, including personal information that you provide on one of these co-branded services may be shared with these partners. By participating in activities or providing your information on these co-branded services, you consent to our providing your information to those partners. Separate privacy policies may apply to these partners' uses of your personal information.
   
   We may use vendors and share information with them to help us operate our business and Baptist OneCare, or administer activities on our behalf, such as Baptist OneCare maintenance, payment processing, and facilitating telehealth video services.

5. Links And Features

   Baptist OneCare may contain links to, or features facilitated by, other online services, some of which Baptist may not control. This Privacy Policy does not apply to other online services, even if they are controlled by us. Please note that other online services may have their own privacy policies. We are not responsible for the privacy practices, advertising, products, or content of online services that Baptist does not control.

6. Personal Information From Children

   Baptist OneCare allows minors aged fourteen to seventeen (14 – 17) to create an Baptist OneCare account ("Minor Account"), which provides the minor access to all of Baptist OneCare features (for example, the ability to communicate with health providers). A Minor Account user may choose to share their information with a parent or guardian through the "Share MyChart Access" feature. If a Minor Account user provides proxy access, the parent or guardian will have access to information on the Minor Account. Please note that the minor may choose to restrict or withdraw such proxy access at any time.

7. Your Choices

   You may log in to Baptist OneCare and visit the update certain preferences or personal information details. You may also download and send records accessible through Baptist OneCare or change sharing and device/app access preferences.
   
   On the App, you may change your preferences regarding our "Appointment Arrival" feature, which uses your phone's location to notify front desk staff when you've arrived. You may use your device settings to change your geolocation preferences. You can also manage App communications that you receive from Baptist OneCare in the "Notifications" settings on the App.

8. Security

   We maintain appropriate administrative, technical, and physical safeguards designed to help protect personal information collected or received through Baptist OneCare. Although we use reasonable efforts to safeguard information, transmission via the Internet is not completely secure and we cannot guarantee the security of your information collected through Baptist OneCare.

   When you initially enroll to use Baptist OneCare, you may be provided an access code. It is extremely important that you keep your Baptist OneCare access code and password completely confidential. Anyone with access to your user name and password will be able to view your medical information and communicate with your health care team as if that person were you. It is your responsibility to prevent disclosure of your user name and/or password - and to change your password if you feel that your security has been compromised. You can change your password online at any time.
   
   Baptist OneCare may interact with your sensitive data to provide certain features, such as video visits or mobile appointment check-in. The first time you try to use any of these features, we will ask for your consent within the app and will only allow you to use a feature if you give consent. You do not have to provide consent if you do not want to allow Baptist OneCare to interact with your data as requested. Baptist OneCare is developed by Epic Systems Corporation; please refer to Epic's Mobile Application Privacy Policy for Patients for more detailed information about the limited ways they may interact with your information to make your use of Baptist OneCare possible.

   Baptist OneCare may offer location-based check-in for in-person appointments or allow you to find healthcare providers near you. The first time you try to use any features that use your location, we will ask for your consent within the app and will only access your location if you give consent. You do not have to provide consent if you do not want to allow Baptist OneCare to use your location. We do not store your location data.

9. Questions / Changes In Policy

   If you have questions or concerns with respect to our Privacy Policy, please contact us at CorporatePrivacySecurity@bmhcc.org. We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Baptist OneCare Privacy Policy.