HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

USA MediHub, in coordination with our state-licensed pharmacy fulfillment partners, is dedicated to maintaining the privacy and security of your Protected Health Information (PHI). Protected Health Information includes individually identifiable health, prescription, and medical record details transmitted or maintained by our healthcare platform.

1. Our Legal Duties Under HIPAA

Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state regulations, our pharmacy network is legally required to:

• Maintain the confidentiality and technical security of your Protected Health Information (PHI).
• Provide you with this Notice detailing our legal duties and privacy practices regarding your PHI.
• Notify you promptly in the event of an unpermitted breach or compromise of your unsecured PHI.
• Abide by the terms of this Notice currently in effect.

2. How We May Use & Disclose Your Health Information

The following categories describe the different ways our platform and fulfillment pharmacy partners may use and disclose your PHI without requiring a separate written authorization:

A. For Prescription Treatment

We may disclose your PHI to licensed pharmacists, prescribers, physicians, or pharmacy technicians to review, dispense, and fulfill your prescription medications. For example, a dispensing pharmacist may contact your doctor to verify dosage instructions or screen for drug interactions.

B. For Payment & Billing

We may use and disclose PHI to process payments, bill insurance plans, verify coverage, or facilitate financial settlement for eligible prescription orders.

C. For Healthcare Operations

We may use PHI to support internal quality assessment, clinical auditing, compliance monitoring, state pharmacy board inspections, and administrative platform management.

3. Special Disclosures Permitted or Required by Law

We may disclose PHI without your authorization under specific legal conditions, including:

• Public Health Safety: Disclosures to FDA inspectors, health departments, or disease control agencies regarding adverse drug events or product recalls.
• Legal & Judicial Mandates: Responding to valid court orders, subpoenas, warrants, or regulatory investigations.
• Law Enforcement & Health Oversight: Disclosures to state pharmacy boards or federal authorities conducting authorized audits or oversight examinations.
• Serious Health or Safety Threats: Disclosures necessary to prevent or lessen a serious, imminent threat to public health or personal safety.

4. Your Individual Rights Regarding Your PHI

Under federal HIPAA regulations, you have specific rights regarding the health information we maintain:

A. Right to Inspect & Request Copies

You have the right to inspect and receive an electronic or paper copy of your medical and prescription billing records. Requests must be submitted in writing to our Privacy Officer.

B. Right to Amend Inaccurate PHI

If you feel that health information in your record is incorrect or incomplete, you may request an amendment for as long as the information is retained by our pharmacy network.

C. Right to an Accounting of Disclosures

You have the right to request a list of disclosures of your PHI made by our platform for purposes other than treatment, payment, or routine healthcare operations.

D. Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment or payment. While we consider all reasonable requests, we are not legally required to agree unless mandated by law.

E. Right to Confidential Communications

You may request that we communicate with you via specific alternate contact methods or delivery addresses (e.g., secondary phone numbers or PO Boxes).

5. Safeguards for Electronic Health Data

USA MediHub implements stringent physical, administrative, and technical security safeguards—including SSL/TLS data encryption, access controls, multi-factor authentication, and audited database storage—to protect electronic PHI against unauthorized access or disclosure.

6. Filing a Privacy Complaint

If you believe your privacy rights have been violated, you have the right to file a formal complaint with USA MediHub or directly with the Secretary of the U.S. Department of Health and Human Services (HHS Office for Civil Rights).

• No Retaliation: You will not be penalized, retaliated against, or denied care for filing a privacy complaint.
• Internal Contact: To file an internal privacy complaint or ask questions about this notice, contact our Privacy Officer at privacy@usamedihub.example or call 1-800-555-0199.