Privacy Policy
Effective date: [EFFECTIVE DATE — set at counsel review]
Who we are
TeamDoctor ("we", "us") provides electronic medical record and billing software to medical practices. Each practice — not TeamDoctor — is the covered entity responsible for your care and your medical record; TeamDoctor processes information on the practice's behalf as a business associate under HIPAA, governed by a Business Associate Agreement.
Information we process
- Patient demographic, clinical, insurance, and billing records entered by practice staff
- Staff account details: name, work email, role, and authentication records
- Access logs: every view of and change to protected health information is recorded (user, time, action, IP address) as required by the HIPAA Security Rule
How information is used
Solely to operate the practice's medical record: charting, scheduling, orders, messaging, billing, and insurance claims. We do not sell personal information, and we do not use patient records for advertising. [COUNSEL: state-law disclosures — CCPA/CMIA/etc. as applicable.]
Sharing
Information is shared only with subprocessors that host and operate the service (database, hosting, claims clearinghouse, fax, and email delivery), each under a Business Associate Agreement, and as directed by your practice (for example, submitting claims to your insurer). [COUNSEL: subprocessor list appendix.]
Security
Encryption in transit, unique per-user accounts with mandatory multi-factor authentication, role-based access, tenant isolation, and an append-only audit trail retained for at least six years.
Your rights
Requests to access, amend, or receive a copy of your medical record go to your practice — the record belongs to your care relationship with them. Your practice can export your complete record from TeamDoctor at any time. [COUNSEL: HIPAA right-of-access wording and state-specific rights.]
Contact
[BUSINESS LEGAL NAME] · [ADDRESS] · [PRIVACY CONTACT EMAIL]