Medstar Health
Effective Date: 10 May 2026
This Privacy Policy explains how Medstar Health (“Medstar Health,” “Company,” “we,” “us,” or “our”) collects, uses, protects, and discloses information when you visit medstarhealthny.com, contact us, request a demo, or use services provided by Medstar Health in connection with care coordination programs for healthcare practices.
Medstar Health provides care coordination support for United States practices, including programs such as Chronic Care Management, Remote Patient Monitoring, Principal Care Management, Behavioral Health Integration, Transitional Care Management, patient engagement, care gap closure, reporting, and billing support.
By using our website or services, you agree to the collection, use, and disclosure of information as described in this Privacy Policy.
1. Definitions
Personal Information
Information that identifies, relates to, describes, or can reasonably be associated with an individual, such as name, email address, phone number, mailing address, date of birth, patient identifiers, or similar information.
Health Information
Information related to a person’s physical or mental health, healthcare services, care management activities, chronic conditions, medications, appointments, referrals, care gaps, monitoring data, or other information connected to healthcare services.
Client
A healthcare practice, physician group, clinic, provider organization, or other healthcare entity that engages Medstar Health to provide care coordination or operational support services.
Patient
An individual whose information may be processed by Medstar Health on behalf of a Client.
Services
Medstar Health’s website, care coordination programs, patient engagement workflows, reporting support, billing support, technology-enabled services, communications, and related operational services.
2. Scope of This Policy
This Privacy Policy applies to information collected through:
Our website, medstarhealthny.com;
Contact forms, demo requests, emails, calls, or other communications with us;
Care coordination services performed for healthcare practices;
Patient engagement activities, including outreach, reminders, follow-ups, and program communications;
EHR-aligned workflows, reporting, documentation, and billing-support processes.
When Medstar Health processes patient information on behalf of a healthcare provider or practice, Medstar Health acts as a service provider or business associate, as applicable, and processes information according to the instructions of that provider or practice and applicable law.
3. Information We Collect
Information You Provide Directly
We may collect information that you voluntarily provide, including:
Name
Email address
Phone number
Practice or organization name
Job title or role
Message contents
Demo request information
Patient or program information provided by a Client
Other information you choose to submit
Information Collected Through Care Coordination Services
When we support a healthcare practice, we may process patient or program information needed to deliver services, such as:
Patient name and contact information
Date of birth or demographic information
Chronic conditions or program eligibility information
Care plan information
Appointment, referral, medication, or care gap information
Remote monitoring or patient-reported information, where applicable
Consent records
Communication history
Monthly engagement or time-tracking records
Documentation and billing-support information
Website and Usage Information
When you visit our website, we may automatically collect limited technical information, such as:
IP address
Browser type
Device information
Pages visited
Referring URL
Date and time of visit
Interactions with website features
General usage analytics
This information helps us operate, secure, and improve our website and services.
4. Why We Collect Information
We may collect and use information to:
Respond to inquiries and demo requests
Provide, operate, and improve our services
Support Client onboarding and workflow setup
Identify eligible patient populations when authorized by a Client
Support patient enrollment and consent workflows
Conduct patient outreach and monthly engagement
Assist with care gap closure, appointment coordination, referrals, medication-related follow-up, and escalation to the Client when needed
Support documentation, reporting, time capture, and billing workflows
Maintain records of communications and services
Improve service quality, security, and operational performance
Develop or improve service features and workflows
Comply with legal, regulatory, contractual, and audit requirements
5. Health Information and Client-Controlled Data
Medstar Health does not independently control medical decisions or clinical care. Clinical decisions remain with the healthcare provider or Client. Medstar Health supports operational care coordination activities under the direction of the Client.
When we process Health Information on behalf of a Client, we use that information only as necessary to provide the services requested by the Client, comply with applicable law, and fulfill contractual obligations.
Medstar Health does not sell patient Health Information.
6. SMS and Text Messaging
Medstar Health may support SMS or text messaging on behalf of healthcare practices and care teams. These messages may include appointment reminders, care management check-ins, program notifications, follow-up requests, or other healthcare-related communications.
Medstar Health does not sell, rent, or disclose patient phone numbers or SMS opt-in consent data to third parties or affiliates for marketing or promotional purposes.
SMS opt-in data and consent records may be shared with service providers only as necessary to deliver text messages or support communication services. These providers are expected to use such data only for the contracted service.
Patients may opt out of text messages by replying STOP to applicable messages. For help, patients may reply HELP. Message and data rates may apply.
7. How We Share Information
We may share information only as described below.
With Clients
We may share patient-related information, reports, documentation, care coordination updates, and escalation notes with the healthcare practice or provider responsible for the patient’s care.
With Service Providers
We may use trusted service providers to support technology, hosting, communications, analytics, SMS delivery, security, documentation, and operational workflows. These providers may access information only as needed to perform services for us or our Clients.
For Legal or Regulatory Reasons
We may disclose information when required to comply with law, regulation, subpoena, court order, government request, audit requirement, or other legal process.
To Protect Rights and Safety
We may disclose information when we believe it is necessary to protect the rights, safety, or security of Medstar Health, Clients, patients, users, or others, or to investigate fraud, abuse, unauthorized activity, or security incidents.
Business Transfers
If Medstar Health is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate protections.
With Consent
We may disclose information when you, a Client, or an authorized individual directs us or consents to do so.
8. Cookies and Analytics
Our website may use cookies, pixels, analytics tools, or similar technologies to understand website usage, improve performance, remember preferences, and support security.
You may be able to disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.
9. Data Retention
We retain information for as long as reasonably necessary to provide services, comply with legal and contractual obligations, resolve disputes, maintain business records, support audits, and enforce agreements.
Retention periods may vary depending on the type of information, the Client relationship, applicable healthcare laws, contractual requirements, and operational needs.
De-identified, aggregated, or anonymized information may be retained for analytics, service improvement, reporting, and business purposes where permitted by law.
10. Data Security
Medstar Health uses reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction.
These safeguards may include access controls, confidentiality obligations, secure systems, workflow controls, and other appropriate protections.
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of information.
11. HIPAA and Healthcare Privacy
Where Medstar Health handles Protected Health Information on behalf of a covered healthcare provider or other covered entity, Medstar Health will process such information in accordance with applicable HIPAA requirements and any applicable business associate agreement.
Patients seeking access to, amendment of, or copies of their medical records should generally contact their healthcare provider or practice directly, because the provider is typically responsible for maintaining the official medical record.
12. Your Privacy Choices and Rights
Depending on your location and applicable law, you may have rights to:
Request access to personal information
Request correction of inaccurate information
Request deletion of certain information
Withdraw consent where processing is based on consent
Opt out of marketing communications
Request information about how your data is used or shared
To exercise privacy rights related to information submitted through our website, contact us using the information below.
For patient information processed on behalf of a healthcare provider, we may direct your request to the relevant provider or Client.
13. Marketing Communications
You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us. Even after opting out of marketing communications, you may still receive service-related, transactional, or healthcare-related communications where permitted by law.
14. Children’s Privacy
Our website and services are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through our website.
We may process information about minors when provided by a healthcare provider, parent, guardian, or authorized Client as part of healthcare-related services, subject to applicable law and Client instructions.
15. Third-Party Websites and Services
Our website or services may contain links to third-party websites or use third-party tools. We are not responsible for the privacy practices, content, or security of third-party websites or services.
Your use of third-party websites or services is governed by their own privacy policies and terms.
16. International or Out-of-State Processing
Information may be stored or processed in locations outside your state, province, or country, depending on our systems, service providers, and operational needs. Where required, we use appropriate safeguards for such processing.
17. Security Incidents and Breach Notification
If a security incident involving personal information or health information occurs, Medstar Health will investigate and provide notifications as required by applicable law, contractual obligations, and, where relevant, Client instructions.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will post the revised policy on this page and update the effective date.
Your continued use of the website or services after changes are posted means you acknowledge the updated Privacy Policy.
19. Contact Us
For questions about this Privacy Policy or our privacy practices, contact:
Medstar Health Website: medstarhealthny.com Email: info@medstarhealthny.com