Health Information Privacy Notice

HIPAA applicability depends on the service, organization, and relationship involved. When Finch Health acts as a business associate for a covered entity, protected health information is handled under the applicable agreement and instructions. This notice does not claim that every Finch Health feature or customer relationship is subject to HIPAA.

Health information may be used to provide requested services, support treatment and operations authorized by the relevant organization, secure the platform, meet legal duties, and investigate incidents. We do not use protected health information for unrelated advertising.

We use administrative, technical, and physical safeguards appropriate to the service, including role-based access, encryption, audit records, workforce controls, and vendor review. Rights to access, amend, restrict, or receive an accounting may need to be exercised through your healthcare organization.

Contact privacy@finch.health. You may also contact the healthcare organization responsible for your care. Retaliation for a good-faith privacy complaint is prohibited.