Source: http://medappsab.com/terms-of-use.html
Timestamp: 2017-05-23 10:33:54
Document Index: 500569164

Matched Legal Cases: ['art 160', 'art 160', 'art 164', '§ 160', 'in fine', '§ 1', '§ 160', 'arts 160']

PatientRounds Mobile Application Terms of Service
These Terms of Service (these "Terms") constitute a binding agreement between MedAppsAB, a California corporation, and its affiliates and subsidiaries ("MedAppsAB," "we," "us"), and you. These Terms include MedAppsAB's Privacy Policy (the "Privacy Policy"), which is attached hereto as Exhibit "A",and incorporated by reference into these Terms. These Terms also include the Business Associate Agreement, which is attached hereto as Exhibit "B", and incorporated by reference into these Terms.
You accept and otherwise agree to be bound by these Terms by downloading or installing the PatientRounds Application, and each time you access or otherwise use the PatientRounds Application thereafter. If you do not accept these Terms, you must not download, install, access or use the PatientRounds Application.
"HIPAA" as used in these Terms means the administrative simplification provisions of the Health Insurance Portability and Accountability Act of 1996, and the regulations promulgated thereunder, including the Privacy Rule and the Security Rule, as amended. "PatientRounds Application" as used in these Terms means the electronic-health-record services licensed by MedAppsAB under the "PatientRounds" trademark, including the PatientRounds mobile application for use in connection with the storage, organization, and sharing of electronic Health-Related Information. "Privacy Rule" as used in these Terms means the Standards for Privacy of Individually Health Information at 45 CFR Part 160 and 164, Subparts A and E, as amended. "Security Rule" as used in these Terms means the Security Standards for the Protection of Electronic Protected Health Information at 45 CFR Part 160 and Part 164, Subparts A and C, as amended. "User" as used in these Terms means you or any other "healthcare provider", as that term is defined in 45 CFR § 160.10, or their agent, that uses the PatientRounds Application. The PatientRounds Application
License to Use the PatientRounds Application. We grant you only a non-exclusive, personal, non-transferable, limited right or license to access and use the PatientRounds Application subject to your full compliance with these Terms. You will not: (i) copy, reverse engineer, decompile or disassemble the PatientRounds Application, in whole or in part, or otherwise attempt to discover the source code to the software used by the PatientRounds Application; or (ii) modify, combine, integrate, render interoperable, or otherwise access for purposes of automating data transfer, the PatientRounds Application, with any other software or services not provided or approved by us. You will obtain no rights to the PatientRounds application, except for those expressly granted by these Terms.
Purpose of PatientRounds Application. The purpose of the PatientRounds Application is to provide a platform for the electronic storage and organization of Health-Related Information by you and other Users, and for the making of such Health-Related Information available to you and other Users for viewing and sharing using an Apple iPad in connection with the medical management of a patient. Ownership of the PatientRounds Application. The PatientRounds Application and the compilation (meaning the collection, arrangement, and assembly) of the computer source code, designs, text, graphics, images, video, information, logos, button icons, and software constituting the PatientRounds Application are the property of MedAppsAB and is protected under copyright, trade secret, trademark, and other laws. MedAppsAB Trademarks. Except for linking to any MedAppsAB web sites, you may not use any MedAppsAB logo or trademark, including but not limited to the "MedAppsAB" or "PatientRounds" trademarks or logos, whether or not such mark(s) are registered, without our prior written approval. This includes use on printed materials of any kind as well as electronic mediums such as internet web pages or email. You shall not use the "MedAppsAB" or "PatientRounds" names, nor any adaptation or variation thereof, in any advertising, promotion or sales literature without our prior written consent in each instance. Professional Responsibility. You will be solely responsible for the professional services you provide. The PatientRounds Application may provide helpful information, such as reference values, and lists and descriptions of available prescription drugs and their respective dosages. We make no representations regarding the completeness, accuracy or utility of any such information in the PatientRounds Application. Such information is not intended to constitute professional advice, diagnosis or treatment, or to substitute for your professional judgment. You assume full risk and responsibility for the use of any information you obtain from or through the PatientRounds Application. We have no liability for the consequences to you or your patients from your use of such information.
The reference values provided, in particular, should be used as guidelines only. Reference values vary based on several factors, including the demographics of the healthy population from which specimens were obtained and the specific methods and/or instruments used to assay these specimens. Laboratories that are accredited by the College of American Pathologists are required to establish and/or validate their own reference values at least annually. Thus, any given result should be interpreted based on the reference value of the laboratory in which the test was done; the laboratory typically provides these values with the test result.
Screening Users. We do not screen Users, nor do we access, view or verify any of the Health-Related Information that they input, upload or store to the PatientRounds Application. We have no responsibility for the conduct of Users, including the Health-Related Information they input, upload or store to the PatientRounds Application. Email us at patientrounds@medappsab.com to notify of us of any User's inappropriate or illegal conduct involving the PatientRounds Application that you encounter.
Responsibility for Misuse by Other Users of Your Account. You acknowledge that, while the PatientRounds Application will contain technical safeguards against a User's unlawful or unauthorized access to Health-Related Information stored to the PatientRounds Application, it will rely to a substantial extent on the representations and undertakings of Users. You agree that we will not be responsible for any unlawful access to or use of any Health-Related Information that you input, upload or store onto the PatientRounds Application, by any User resulting from the User's misrepresentation to us, or their breach of their respective agreement with us for their use of the PatientRounds Application. Individuals' Consent for Data Collection and Use. You represent and warrant that you have obtained the proper consents, authorizations, and releases from any persons or entities to the fullest extent required by applicable law before inputting, uploading or storing Health-Related Information to the PatientRounds Application.
Transferring Information into the PatientRounds Application. You may be able to transfer information from your or third-party data sources into the PatientRounds Application. You represent and warrant that you have all necessary authorizations for such data transfers and that such data transfers will comply with HIPAA and other applicable federal and state law.
Compliance with Law. You are solely responsible for ensuring that your use of the PatientRounds Application complies with applicable law, including laws relating to the maintenance of the privacy, security, and confidentiality of Health-Related Information. You will not grant any User any rights of access or use of the PatientRounds Application that they would not be allowed to have under applicable laws. We offer no assurance that your use of the PatientRounds Application under these Terms will not violate any law or regulation applicable to you. You are responsible for complying with all state and federal laws related to retention of medical data and records, patient access and amendment to information, and patient authorization to release data. MedAppsAB's Health-Related-Information Practices
Access and Use of Health-Related Information. You retain all rights with regard to the Health-Related Information that you input, upload or store to the PatientRounds Application. Because the PatientRounds Application encrypts all Health-Related Information that Users input, upload or store to the PatientRounds Application, we will neither be able to use, nor have any access to such information.
Appropriate Safeguards. We will implement and maintain appropriate administrative, physical and technical safeguards to protect the Health-Related Information that you input, upload or store to the PatientRounds Application, including the above-described encryption of all such information. The safeguards shall comply with the federal, state and local requirements, including the Privacy Rule and the Security Rule. Security Incident. We will immediately notify you of any breach or suspected breach of the security of the PatientRounds Application of which we become aware, or any unauthorized use of disclosure of information within or obtained from the PatientRounds Application, and will take such action to mitigate the breach, suspected breach, or unauthorized use or disclosure of information within or obtained from the PatientRounds Application. Security Rule. We will comply with the provisions of the Security Rule that are made applicable to business associates. We will notify you of the discovery of any breach of any Health-Related Information that you store to the PatientRounds Application and we will cooperate reasonably with you to investigate and mitigate any such breach. The PatientRounds Application encrypts all Health-Related Information that Users input, upload or store to the PatientRounds Application. Still, to the extent possible and applicable, we will provide you with any necessary information that is known to us so that you may make any legally required notification to individuals.
strAccount Holder. You, and any other Users that sign up for an account, must furnish only a name and email address as part of the sign-up process.
Protecting Your Log-In Credentials. As a registered User, you will have log-in information, including a username and password. You may not share your account and log-in information with, or allow access to your account by, any third party. As you will be responsible for all activity that occurs under your account and access credentials, you should take care to preserve the confidentiality of your username and password, and any device you use to access the PatientRounds Application. You agree to notify us immediately of any breach in secrecy of your log-in information. If you have any reason to believe that your account information has been compromised or that your account has been accessed by a third party, you agree to immediately notify us by email at patientrounds@medappsab.com. You will be solely responsible for the losses incurred by us and others (including patients) due to any unauthorized use of your account that takes place as a result of your account having been compromised.
Electronic Notices. By using the PatientRounds Application, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the PatientRounds Application. If we learn of a security system's breach, we may attempt to notify you electronically by posting a notice on the PatientRounds Application or sending an email to you. Stored Health-Related Information Disclaimers, Limitations, and Prohibitions
Stored Health-Related-Information Disclaimers. We do not represent or guarantee the truthfulness, accuracy, or reliability of any Health-Related Information inputted, uploaded or stored to the PatientRounds Application by any User. You accept that any reliance on any Health-Related Information inputted, uploaded or stored by other Users to the PatientRounds Application will be at your own risk. Liability for Stored Health-Related Information. You are solely responsible for any Health-Related Information that you input, upload or store to the PatientRounds Application. We do not endorse any, nor are we responsible for, any Health-Related Information inputted, uploaded or stored by you or any other User to the PatientRounds Application. You assume all risks associated with your inputting, uploading or storing of Health-Related Information to the PatientRounds Application, including anyone’s reliance on its quality, accuracy, or reliability. You may expose yourself to liability if, for example, you input, upload or store Health-Related Information to the PatientRounds Application that is inaccurate, false or misleading; violates third-party rights; or is unlawful or violates any law or regulation.
Limitations and Prohibitions. You agree to use the PatientRounds Application only for its intended purpose and in an authorized manner. You must use the PatientRounds Application in compliance with all privacy, data protection, intellectual property, and other applicable laws. The following uses of the PatientRounds Application are prohibited. You may not:
attempt to interfere with, harm, reverse engineer, steal from, or gain unauthorized access to the PatientRounds Application, User accounts, or the technology and equipment supporting the PatientRounds Application;
frame or link to the PatientRounds Application without permission;
use data mining, robots, or other data gathering devices on or through the PatientRounds Application, unless specifically allowed by these Terms;
sell, transfer, or assign any of your rights to use the PatientRounds Application to a third party without our express written consent;
use the PatientRounds Application in an illegal way or to commit an illegal act in relation to the PatientRounds Application or that otherwise results in fines, penalties, and other liability to us or others. Disclaimer, Exclusion of Warranties, Limitation of Liability, and Indemnification
Carrier Lines. YOU ACKNOWLEDGE THAT ACCESS TO THE PATIENTROUNDS APPPLICATION WILL BE PROVIDED OVER VARIOUS FACILITIES AND COMMUNICATIONS LINES, AND INFORMATION WILL BE TRANSMITTED OVER LOCAL EXCHANGE AND INTERNET BACKBONE CARRIER LINES AND THROUGH ROUTERS, SWITCHES, AND OTHER DEVICES (COLLECTIVELY, “CARRIER LINES”) OWNED, MAINTAINED, AND SERVICED BY THIRD-PARTY CARRIERS, UTILITIES, AND INTERNET SERVICE PROVIDERS, ALL OF WHICH ARE BEYOND OUR CONTROL. WE ASSUME NO LIABILITY FOR, OR RELATING TO, THE INTEGRITY, PRIVACY, SECURITY, CONFIDENTIALITY, OR USE OF ANY INFORMATION WHILE IT IS TRANSMITTED ON THE CARRIER LINES, OR ANY DELAY, FAILURE, INTERRUPTION, INTERCEPTION, LOSS, TRANSMISSION, OR CORRUPTION OF ANY DATA OR OTHER INFORMATION ATTRIBUTABLE TO TRANSMISSION ON THE CARRIER LINES. USE OF THE CARRIER LINES IS SOLELY AT YOUR RISK AND IS SUBJECT TO ALL APPLICABLE LOCAL, STATE, NATIONAL, AND INTERNATIONAL LAWS.
No Warranties. ACCESS TO THE PATIENTROUNDS APPLICATION AND THE INFORMATION CONTAINED ON THE PATIENTROUNDS APPLICATION IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT ANY WARRANTY OF ANY KIND, AND WE DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT AND TITLE. YOU ARE SOLELY RESPONSIBLE FOR ANY AND ALL ACTS OR OMISSIONS TAKEN OR MADE IN RELIANCE ON THE SERVICES OR THE INFORMATION IN THE SERVICES, INCLUDING INACCURATE OR INCOMPLETE INFORMATION. IT IS EXPRESSLY AGREED THAT IN NO EVENT SHALL WE BE LIABLE FOR ANY SPECIAL, INDIRECT, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO, LOSS OF PROFITS OR REVENUES, LOSS OF USE, LOSS OF GOODWILL, OR LOSS OF INFORMATION OR DATA, WHETHER A CLAIM FOR ANY SUCH LIABILITY OR DAMAGES IS PREMISED UPON BREACH OF CONTRACT, BREACH OF WARRANTY, NEGLIGENCE, STRICT LIABILITY, OR ANY OTHER THEORY OF LIABILITY, EVEN IF WE HAVE BEEN APPRISED OF THE POSSIBILITY OR LIKELIHOOD OF SUCH DAMAGES. WE DISCLAIM ANY AND ALL LIABILITY FOR ERRONEOUS TRANSMISSIONS AND LOSS OF SERVICE RESULTING FROM COMMUNICATION FAILURES BY TELECOMMUNICATION SERVICE PROVIDERS OR THE SERVICES.
Conditions for Breach. We will not be deemed to be in violation of these Terms unless you have first given us written notice specifying the nature of the default, and we have failed within thirty (30) days of receipt of the notice either to cure the default or, if cure within such period is not practicable, to be diligently proceeding to cure the default.
Other Users. YOU ACKNOWLEDGE THAT OTHER USERS HAVE ACCESS TO AND ARE USING THE PATIENTROUNDS APPLICATION AND THE ACTIONS OF SUCH OTHER USERS ARE BEYOND OUR CONTROL. ACCORDINGLY, WE DO NOT ASSUME ANY LIABILITY FOR OR RELATING TO ANY IMPAIRMENT OF THE PRIVACY, SECURITY, CONFIDENTIALITY, INTEGRITY, AVAILABILITY, OR RESTRICTED USE OF ANY INFORMATION ON THE SERVICES RESULTING FROM ANY USER’S ACTIONS OR FAILURES TO ACT.
Unauthorized Access; Lost or Corrupt Data. WE ARE NOT RESPONSIBLE FOR UNAUTHORIZED ACCESS TO YOUR DATA, FACILITIES OR EQUIPMENT BY PERSONS USING THE PATIENTROUNDS APPLICATION OR FOR UNAUTHORIZED ACCESS TO, ALTERATION, THEFT, CORRUPTION, LOSS OR DESTRUCTION OF YOUR DATA FILES, PROGRAMS, PROCEDURES, OR INFORMATION THROUGH THE SERVICES, WHETHER BY ACCIDENT, FRAUDULENT MEANS OR DEVICES, OR ANY OTHER MEANS. YOU ARE SOLELY RESPONSIBLE FOR VALIDATING THE ACCURACY OF ALL OUTPUT AND REPORTS, AND FOR PROTECTING YOUR DATA AND PROGRAMS FROM LOSS BY IMPLEMENTING APPROPRIATE SECURITY MEASURES. YOU HEREBY WAIVE ANY DAMAGES OCCASIONED BY LOST OR CORRUPT DATA, INCORRECT REPORTS, OR INCORRECT DATA FILES RESULTING FROM PROGRAMMING ERROR, OPERATOR ERROR, EQUIPMENT OR SOFTWARE MALFUNCTION, SECURITY VIOLATIONS, OR THE USE OF THIRD-PARTY SOFTWARE. WE ARE NOT RESPONSIBLE FOR THE CONTENT OF ANY INFORMATION TRANSMITTED OR RECEIVED THROUGH OUR PROVISION OF PATIENTROUNDS APPLICATION.
Limitation of Liability. NOTWITHSTANDING ANYTHING IN THESE TERMS TO THE CONTRARY, OUR AGGREGATE LIABILITY UNDER THESE TERMS, REGARDLESS OF THEORY OF LIABILITY, SHALL BE LIMITED TO THE AGGREGATE FEES ACTUALLY PAID BY YOU UNDER THESE TERMS FOR THE SIX (6) MONTH PERIOD PRECEDING THE EVENT FIRST GIVING RISE TO THE CLAIM.
Indemnification. You agree to defend, indemnify, and hold harmless MedAppsAB and its affiliates, officers, employees, agents, partners, and licensors from and against any claims, actions, or demands, including without limitation reasonable legal and accounting fees, alleging or resulting from (i) your use of or reliance on any Health-Related Information inputted, uploaded or stored to the PatientRounds Application by any User, (ii) your use of or reliance on the PatientRounds Application or its content, (iii) any activity on the PatientRounds Application under your log-in credentials, or (iv) your breach of these Terms. We shall provide notice to you promptly of any such claim, suit, or proceeding.
Termination at Any Time. You may stop using the PatientRounds Application at any time. We also reserve the right to suspend or end your use of the PatientRounds Application at any time in accordance with Section 8.2 below at our discretion and without notice. For example, we may suspend or end your use of the PatientRounds Application in a manner that would cause us legal liability, disrupt the PatientRounds Application, or disrupt others' use of the PatientRounds Application. Our Duties after Termination. For 45 days following the termination of your use of the PatientRounds Application, we will continue to store and provide you with access to the Health-Related Information that you have inputted, uploaded or stored to the PatientRounds Application so that you may print hard copies of such records prior to our destruction of the records at the expiration of that period. You are solely responsible for printing hard copies of your Health-Related Information prior to its destruction at the end of the 45-day period, and with otherwise complying with all state and federal laws related to the retention of such records. Arbitration, Class Waiver, and Waiver of Jury Trial
Arbitration. ANY DISPUTE, CLAIM OR CONTROVERSY ARISING OUT OF OR RELATING TO THESE TERMS OR THE BREACH, TERMINATION, ENFORCEMENT, INTERPRETATION OR VALIDITY THEREOF, INCLUDING THE DETERMINATION OF THE SCOPE OR APPLICABILITY OF THIS AGREEMENT TO ARBITRATE, SHALL BE SUBJECT TO FINAL AND BINDING ARBITRATION GOVERNED BY THE FEDERAL ARBITRATION ACT (9 U.S.C. §§ 1 ET SEQ.). THE ARBITRATION SHALL BE CONDUCTED BEFORE A SINGLE ARBITRATOR IN ACCORDANCE WITH THE COMMERCIAL DISPUTE RESOLUTION PROCEDURES AND THE SUPPLEMENTARY PROCEDURES FOR CONSUMER RELATED DISPUTES OF THE AMERICAN ARBITRATION ASSOCIATION (THE “AAA”) THEN IN EFFECT, AS MODIFIED BY THIS AGREEMENT, AND WILL BE ADMINISTERED BY THE AAA. JUDGMENT ON THE AWARD MAY BE ENTERED IN ANY COURT HAVING JURISDICTION. THIS CLAUSE SHALL NOT PRECLUDE EITHER PARTY FROM SEEKING TEMPORARY OR PRELIMINARY INJUNCTIVE RELIEF IN CONNECTION WITH AN ARBITRABLE CONTRVERSY, BUT ONLY UPON THE GROUND THAT THE AWARD TO WHICH THAT PARTY MAY BE ENTITLED MAY BE RENDERED INEFFECTUAL WITHOUT SUCH PROVISIONAL RELIEF.
Class Waiver. THE PARTIES AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF, CLASS MEMBER, OR PRIVATE ATTORNEY GENERAL IN ANY PURPORTED CLASS, REPRESENTATIVE, OR PRIVATE-ATTORNEY-GENERAL PROCEEDING. BY ENTERING INTO THESE TERMS, YOU AND WE ARE EACH WAIVING THE RIGHT TO A JURY TRIAL OR TO PARTICIPATE IN A CLASS ACTION. THE ARBITRATOR MAY NOT CONSOLIDATE MORE THAN ONE PERSON’S CLAIM WITH YOUR CLAIMS OR OUR CLAIMS AND MAY NOT OTHERWISE PRESIDE OVER ANY REPRESENTATIVE, CLASS, OR PRIVATE-ATTORNEY-GENERAL PROCEEDING. THE ARBITRATOR MAY AWARD DECLARATORY OR INJUNCTIVE RELIEF ONLY IN FAVOR OF THE INDIVIDUAL PARTY SEEKING RELIEF AND ONLY TO THE EXTENT NECESSARY TO PROVIDE RELIEF WARRANTED BY THAT PARTY’S INDIVIDUAL CLAIM.
Severability of Arbitration Agreement. If any provision of this arbitration agreement is found by a court of competent jurisdiction to be invalid, that shall in no way affect, impair, or invalidate any other provision of this arbitration agreement, and such other provisions shall remain in full force and effect.
Complete Understanding. These Terms constitute the entire agreement between you and MedAppsAB concerning your use of the PatientRounds Application. There are no written or oral understandings or promises between you and us with respect to the subject matter of these Terms other than those contained or referenced in these Terms. Waiver. Our failure to exercise or enforce any right or provision of these Terms shall not constitute a waiver of such right or provision. Severability. If any provision of these Terms is found by a court of competent jurisdiction to be invalid, the parties nevertheless agree that the court should endeavor to give effect to the parties' intentions as reflected in the provision, and the other provisions of these Terms remain in full force and effect. Modification. We may revise these Terms at any time by posting an updated version to this web page. You should visit this page periodically to review the most current Terms, because you are bound by them. Your continued use of the PatientRounds Application after a change to these Terms constitutes your binding acceptance of these Terms. Without limiting the foregoing, if we make a change to the Terms that materially affects your use of the PatientRounds Application, we may post notice or notify you via email of any such change. Applicable Law. The interpretation of these Terms and the resolution of any disputes arising under these Terms shall be governed by the laws of the State of California, without regards to its conflict of law provisions. If any arbitration, action or other proceeding is brought on or in connection with these Terms, its venue shall be exclusively in the City and County of San Diego, California. Last updated: May 1, 2016
PatientRounds Mobile Application Exh. A - Privacy Policy
This Privacy Policy (this “Privacy Policy”) describes how MedAppsAB, a California corporation, and its affiliates and subsidiaries ("MedAppsAB," "we," "us") uses and discloses "Personal Information" that you and other PatientRounds Application users ("Users") input, upload or store to the PatientRounds Application. “Personal Information” means information that alone or when in combination with other information may be used to readily identify, contact, or locate you. The only such information that MedAppsAB receives from Users is the name and email address that they provide when registering for a PatientRounds Application account. We do not have the ability to use, access, disclose or share any Health-Related Information that Users input, upload or store to the PatientRounds Application because the PatientRounds Application encrypts all Health-Related Information. This Privacy Policy is part of, and incorporated into, the Terms of Service governing your use of the PatientRounds Application (the "Terms of Service"). About MedAppsAB
MedAppsAB provides Users with the PatientRounds Application for purposes of storing and organizing electronic Health-Related Information. Other than providing a platform for the electronic storage and organization of such information, MedAppsAB acts as a service provider for the PatientRounds Application's Users and does not own, control or have any rights to the Health-Related Information that Users input, upload or store to the PatientRounds Application. Nor does MedAppsAB have the ability to access or use the Health-Related Information that Users input, upload or store to the PatientRounds Application because the PatientRounds Application encrypts such information. MedAppsAB holds and handles the Health-Related Information that Users store to the PatientRounds Application under the requirements specified by applicable law, such as the Health Insurance Portability and Accountability Act ("HIPAA").
This Privacy Policy does not reflect the privacy practices of Users, and MedAppsAB is not responsible for the respective User's privacy policies or practices. MedAppsAB does not review, comment upon, or monitor the User's respective privacy policies or their compliance with their respective privacy policies, nor does MedAppsAB review User's respective instructions to determine whether they are in compliance or conflict with the terms of a User's published privacy policy or applicable law.
User Content Inputted or Stored to the PatientRounds Application
Your User Content: When you use the PatientRounds Application, you may submit information by:
Typing-in data (such as when you register for the PatientRounds Application); or Uploading a document, image or other data file. Engagement Tools and Data: The PatientRounds Application also gathers information whenever you visit, log in or otherwise interact with it. As with websites and other interactive services, whenever you interact with the PatientRounds Application, your mobile device (the "Device") and its software transmits a “request” to us. That request includes non-Personal Information received from your Device (and its software) necessary for us to identify and appropriately route the information your Device is requesting. These “requests” and “replies” are the backbone of all Internet services. Thus, whenever you visit and navigate through the PatientRounds Application or otherwise take an action or interact with elements of the PatientRounds Application or its content or features, your Device and its software are sending non-Personal Information to us. In addition to managing the appropriate routing of information, we may use Engagement Tools to enhance the quality of the service and content you receive. For example, we may use Engagement Tools to:
analyze the performance of the PatientRounds Application and its various features and content.
Thus, our Engagement Tools may automatically receive information about your Device and the software running on it. We call such data “Engagement Data.”
Engagement Data may include elements such as the date and time a “request” is made, the model of the Device making the “request,” the type and version of operating system running on a Device, routing information, and an anonymous unique Device identification number. Engagement Data generally does not personally identify a Device’s user. However, it can be combined with Personal Information. If so, we treat such combined information the same way we treat Personal Information. Additionally, if our Engagement Tools collect data elements that contain Personal Information, we treat those data elements as Personal Information.	How Information is Used
We may use Personal Information and Engagement Data for the following purposes:
Operating, maintaining, managing and administering the PatientRounds Application, including processing registrations, and providing customer support;
Administrative announcements about features, functionality, terms or other aspects of the PatientRounds Application; and, if applicable, informing you about offers for services or products we believe may be of interest;
Safeguarding and protecting the PatientRounds Application and the information it safeguards; and
Any other purpose described in this Privacy Policy or the Terms of Service. We use Engagement Data for the following purposes:
Auditing, research, measurement and analysis in order to maintain, administer, enhance and protect the PatientRounds application, including analyzing usage trends and patterns and measuring the effectiveness of content, features or services;
Creating new features and services; and
Other purposes described in this Privacy Policy or the Terms of Service. How Our Services Allow Users to Share Information
Records: The PatientRounds Application allows Users to store Health-Related Information (“Records”), including Records that identify other individuals. The PatientRounds Application permits Users to share all or portions of these Records at their discretion with other "healthcare providers," as that term is defined in 45 CFR § 160.10, or their patients.
You should be aware that this Privacy Policy covers only the information you submit through the PatientRounds Application. If you contact or exchange information with another User in person or through a means other than the PatientRounds Application, such activity is not covered by this Privacy Policy.
What Other Users Do with Information You Share with Them: Because the PatientRounds Application enables Users to share information you share with them, you should take care in selecting with whom you share your Records and other information. Although the PatientRounds Application allows you to transmit information, we cannot take responsibility for the actions of other Users or persons with whom you share your Records and other information.
Confidentiality of Health Information: Users are subject to laws and regulations governing the use and disclosure of health information they create or receive. Included among them is the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Health Information Technology for Economic and Clinical Health of 2009 (“HITECH”), and the regulations adopted thereunder. When we store “individually identifiable health information” (as such term is defined by HIPAA) on behalf of a User who has entered into the Terms and Conditions, a Healthcare Provider User Agreement, we do so as its “business associate” (as also defined by HIPAA). We are unable to access or use any Health-Related Information inputted, uploaded or stored to the PatientRounds Application because it is encrypted. Even if we were able to do so, the Terms and Conditions, including its Business Associate Agreement, would prohibit us from, among other things, using individually identifiable health information in a manner that the User themselves may not. We are also required to, among other things, apply reasonable and appropriate measures to safeguard the confidentiality, integrity and availability of individually identifiable health information we store on behalf of such Users. We are also subject to laws and regulations governing the use and information of certain personal and health information, including HIPAA, when we operate as a business associate of a User.
We will be unable to access, use, disclose, or share any Health-Related Information you input, upload or store to the PatientRounds Application because the PatientRounds Application encrypts such information. Still, to the extent possible and applicable, we will not share any Personal Information, or Health-Related Information in its encrypted form, except under the following circumstances: When we share such information with our current and future affiliates;
When we share such information with trusted service providers operating on our behalf consistent with the terms of this Privacy Policy and the Terms of Service. Such service providers shall be bound by appropriate confidentiality and security obligations, which may include, as applicable, business associate contract obligations;
When we protect the PatientRounds Application, the information it safeguards, and the rights of third parties; In connection with a sale, merger, transfer, exchange, reorganization or other disposition (whether of assets, stock, or otherwise) of all or a portion of the business conducted by the services to which this Privacy Policy applies. If such a transaction occurs, the acquiring company’s use of your Personal Information will remain subject to this Privacy Policy; and
Any other purposes described in this Privacy Policy or the Terms of Service.
It is important for you to understand that other Users who submit to, or receive from, the PatientRounds Application any Health-Related Information, may share that information with other persons, even without separately notifying you or seeking your consent.
The PatientRounds Application is protected by technical measures intended to safeguard the confidentiality, integrity and accessibility of sensitive information the Users store and share on the PatientRounds Application. Indeed, the PatientRounds Application encrypts all Health-Related Information that Users input, upload or store to the PatientRounds Application. Further, certain regulations require us to investigate potential or suspected threats on the PatientRounds Application or the confidentiality, integrity or availability of the information it safeguards. Accordingly, to the extent we are able to do so, we may preserve, use and disclose information – including Personal and non-Personal Information – when we have a good faith belief it is necessary or advisable to:
Detect, prevent and address potential or suspected: threats on the PatientRounds Application or the confidentiality, integrity or availability of any information it stores; fraud and other illegal activity; or violations of the Terms of Service; and
We may also preserve and disclose Personal Information, and Health-Related Information in its encrypted form, in response to a search warrant, court order, subpoena, judicial proceeding or other legal process if we have a good faith belief that the law requires us to do so. Such legal process may prohibit us from notifying the Users or other individuals or entities identified by such information or take such other actions as would otherwise be a violation of the Terms of Service or this Privacy Policy. When we preserve Personal Information and Health-Related Information in its encrypted form pursuant to this section, it may be for extended periods of time, as we in good faith believe are necessary or appropriate under the circumstances, and may include the preservation of information from accounts that have been disabled.
The security of the PatientRounds Application and the information it stores, processes and transmits is a top priority. To prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of the information we collect, we deploy a wide range of technical, physical and administrative safeguards, including: Secure Socket Layer (SSL) encryption, firewalls, system alerts and other information system security technologies; housing health data in secure facilities that restrict physical and network access; and regular evaluation and enhancement of our information technology systems, facilities, and information collection, storage and processing practices. Under the Terms of Service and applicable law, we are required to apply reasonable and appropriate measures to safeguard the confidentiality, integrity and availability of individually identifiable health information (as such term is defined by HIPAA) residing on and processed by the PatientRounds Application. It is important to remember, however, that no system can guarantee 100% security at all times. Thus, we cannot guarantee the security of information stored on or transmitted to or from the PatientRounds Application.
Steps You Can Take: If we learn of a security vulnerability or risk, we may attempt to notify you and provide information on protective measures you may take. There are, however, some precautions that you can proactively take to improve your system security and reduce the likelihood of unintended disclosure of Personal Information or Health-Related Information:
Because malware often targets vulnerabilities in existing operating systems, browsers, plug-ins and other programs, software vendors frequently update their products with security patches to guard against known or commonly exploited vulnerabilities. Use a strong password using a combination of letters and numbers that are not easily guessed. Do not share your password with others.
You may not use the PatientRounds Application in any jurisdiction where offering, accessing or using the PatientRounds Application would be illegal or unlawful. If you are located outside of the United States, please note that the information you submit to us will be transferred to the U.S.. By using the PatientRounds Application, you consent to this transfer. You also consent to the transfer of any Personal Information or Health-Related Information by us or any of the other parties described in the section “Sharing of Information” above, whether located in the U.S. or any other countries, for the purposes described in this Privacy Policy. If you are located in a country other than the U.S., you should note that, at present, the laws of the U.S. and certain other countries have not been approved by the European Commission or privacy authorities in certain other countries as providing “adequate protection” for Personal Information within the meaning of the European Union Data Protection Directive or applicable laws of other countries.
We will post any changes to this Privacy Policy along with their effective date on this page, and we will provide a more prominent notice if they are significant. Because this Privacy Policy can change at any time, we encourage you to reread it periodically to see if there have been any changes that affect you. If you disagree with any changes and do not wish your information to be subject to the revised Privacy Policy, you will need to deactivate your account before the new Privacy Policy becomes effective. Your use of the PatientRounds Application following any such change constitutes your agreement that all information collected from or about you after the revised Privacy Policy is posted will be subject to the terms of the revised Privacy Policy.
In the event of any conflict between the terms of this Privacy Policy and the terms and conditions of the provisions of the Terms of Service or the Business Associate Agreement, the Terms of Service or the Business Associate Agreement shall prevail. Contacting MedAppsAB
If you have any questions, comments, or concerns about MedAppsAB or this Privacy Policy, please email us at patientrounds@medappsab.com .
PatientRounds Mobile Application Exh. B - Business Associate Agreement
This Business Associate Agreement (this “BA Agreement”) is between MedAppsAB, a California corporation, and its affiliates and subsidiaries (“MedAppsAB," "we", "us"), and you ("Covered Entity"), and forms part of the Terms of Service between MedAppsAB and you relating to the provision of the PatientRounds Application to you (the "Terms of Service"). WHEREAS, pursuant to the federal Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the HITECH Act, the U.S. Department of Health and Human Services issued Standards for Privacy of Individually Identifiable Health Information (the “Privacy Rule”), Security Standards for the Protection of Electronic Protected Health Information (the “Security Rule”) and Breach Notification Standards for Unsecured Protected Health Information (the “Breach Notification Rule”) at 45 CFR parts 160 and 164; WHEREAS, the Privacy Rule requires certain entities to have their Business Associates with whom the entities may share Protected Health Information (as such term is defined in the Privacy Rule) to agree to certain provisions related to the use and disclosure of such Protected Health Information (the “Business Associate Contract Provisions”); WHEREAS, the Security Rule and the Breach Notification Rule impose obligations on Covered Entities and their Business Associates that must be addressed in the Business Associate Contract Provisions; WHEREAS, this BA Agreement is intended to satisfy any applicable obligations of Covered Entity under 45 CFR 164.308(b), 164.314(a) and 164.504(e) and shall be applicable only in the event and to the extent MedAppsAB meets, with respect to Covered Entity, the definition of a Business Associate set forth at 45 CFR 160.103, or applicable successor provisions with respect to the provision of the PatientRounds Application; and WHEREAS, you and MedAppsAB desire to enter into this BA Agreement in order to make the Business Associate Contract Provisions part of the Terms of Service. Now therefore, the parties hereby agree as follows: Definitions
Capitalized terms used, but not otherwise defined, in this BA Agreement shall have the same meaning as those terms in the Privacy Rule, the Security Rule and the Breach Notification Rule, and if no such definition is provided in such rules, then the meaning shall be that given to such capitalized term in the Terms of Service to which this BA Agreement is an Exhibit. Obligations and Activities of MedAppsAB. Use and Disclosure. Because the PatientRounds Application will encrypt all Health-Related Information - including Protected Health Information ("PHI") - that you input, upload or store the PatientRounds Application, MedAppsAB will lack the ability to access or use such information, or to share such information other than in its encrypted form. Still, to the extent possible and applicable, MedAppsAB agrees to not access, use or disclose PHI that you input, upload or store to the PatientRounds Application other than as permitted or required by the Terms of Service, this BA Agreement, or as Required By Law. Appropriate Safeguards. MedAppsAB agrees to use appropriate administrative, physical, and technical safeguards to prevent the use or disclosure of the PHI other than as provided for by the Terms of Service or this BA Agreement. All Health-Related Information- including PHI - inputted, uploaded or stored to the PatientRounds application will be encrypted. And except for the specific uses and disclosures set forth in the Terms of Service and this BA Agreement, we may not use or disclose PHI in a manner that would violate Subpart E of 45 CFR 164 if done by Covered Entity. Reporting of Improper Access, Use or Disclosure. MedAppsAB agrees to report to you any use or disclosure of PHI that is not provided for by the Terms of Service or this BA Agreement of which it becomes aware. MedAppsAB also agrees to notify you of any Breach of Unsecured PHI in accordance with 45 CFR 164.410; such notification shall be made in as expeditious a manner as possible and in no event later than 60 calendar days after discovery, as defined in 45 CFR 164.410 (a)(2) and shall comply with the requirements of the Breach Notification Rule. MedAppsAB shall also, without unreasonable delay, but in no event later than five business days after becoming aware of any Security Incident that is not an Unsuccessful Security Incident (as defined herein), report the successful Security Incident to Covered Entity. Covered Entity acknowledges that MedAppsAB experiences Unsuccessful Security Incidents from time-to-time. Covered Entity acknowledges receipt of this report of Unsuccessful Security Incidents. “Unsuccessful Security Incident” means an immaterial Security Incident that does not involve an unauthorized use or disclosure of Unsecured Protected Health Information. Agents. You acknowledge that MedAppsAB may use Subcontractors when performing the Terms of Service. MedAppsAB agrees to ensure that any Subcontractor to whom it provides PHI received from, or created or received by MedAppsAB on your behalf, agrees to substantially the same restrictions and conditions that apply through this BA Agreement to MedAppsAB with respect to such information. Covered Entity Access. All PHI maintained by MedAppsAB in a Designated Record Set for Covered Entity will be available to Covered Entity in its encrypted form in a time and manner that reasonably allows Covered Entity to comply with the requirements under 45 CFR 164.524 and 164.526. MedAppsAB shall not be obligated to provide any such information to any individual or person other than to Covered Entity.
Access to Books and Records. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to access or use such information. Still, to the extent possible and applicable, MedAppsAB agrees to make internal practices, books, and records available to the Secretary, in a time and manner designated by the Secretary, for purposes of Secretary's determining Covered Entity's compliance with the Privacy Rule and Security Standards. Accounting. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to access or use such information. Still, to the extent possible and applicable, MedAppsAB agrees to document such disclosures of PHI and information related to such disclosures as would be required for you to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 CFR 164.528 and the regulations adopted pursuant to 42 USC17935(c), and to reasonably cooperate with you in responding to such requests. Privacy Rule Compliance. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to use or access such information. Still, to the extent possible and applicable, if MedAppsAB carries out any of your obligations under the Privacy Rule, MedAppsAB shall comply with the requirements of the Privacy Rule that apply to you in the performance of such obligations, provided that you advise MedAppsAB of such obligations which are not included in the PatientRounds Application and agree to a fee for the performance of such obligations in accordance with Section 2.9. Compensation. If, in the performance of its obligations set forth in Sections 2.5 through 2.8 (inclusive), and Sections 4.1 through 4.3 (inclusive), MedAppsAB expends time and materials in addition to the PatientRounds Application to be provided by MedAppsAB under the Terms of Service, MedAppsAB shall provide you with an estimate of the fees for such time and materials. Upon the mutual agreement by you and MedAppsAB as to the fees to be charged by MedAppsAB for such time and materials, MedAppsAB shall invoice you on a time and materials basis at the agreed-upon rate(s), and you shall pay MedAppsAB all such fees in accordance with the payment terms of the Terms of Service. Permitted Uses and Disclosures by MedAppsAB. Terms of Service. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to access or use such information. Still, to the extent possible and applicable, except as otherwise limited in this BA Agreement, MedAppsAB may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Terms of Service, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity.
Minimum Necessary. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to access or use such information. Still, to the extent possible and applicable, and when practicable, MedAppsAB shall limit its disclosure of PHI in its encrypted form to the minimum amount required to accomplish the intended purpose of the disclosure. Disclosure for Administration of MedAppsAB. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to access or use such information. Still, to the extent possible and applicable, except as otherwise limited in this BA Agreement, MedAppsAB may disclose PHI in its encrypted form for the proper management and administration of MedAppsAB, provided that (i) disclosures are Required by Law, or (ii) Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required by Law or for the purpose for which it was disclosed to the person, and the person notifies us of any instances of which it is aware in which the confidentiality of the information has been breached. Use for Data Aggregation Services to Covered Entity. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to access or use such information. Still, to the extent possible and applicable, except as otherwise limited in this BA Agreement, MedAppsAB may disclose PHI in its encrypted form to provide Data Aggregation services to Covered Entities as permitted by 42 CFR 164.504(e)(2)(i)(B). Your Obligations. Privacy Notice. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to use or access such information. Still, to the extent possible and applicable, you shall provide MedAppsAB with any limitations in your notice of your privacy practices in accordance with 45 CFR 164.520, to the extent that such limitation may affect MedAppsAB’s disclosure of PHI in its encrypted form. Changes of Permission of Individual. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to use or access such information. Still, to the extent possible and applicable, you shall provide MedAppsAB with any changes in, or revocation of, permission by an Individual to use or disclose PHI, to the extent that such changes may affect MedAppsAB’s disclosure of PHI in its encrypted form. Restrictions on Use or Disclosure. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to access or use such information. Still, to the extent possible and applicable, you shall notify MedAppsAB in writing of any restriction to the disclosure of PHI that you have agreed to in accordance with 45 CFR 164.522, to the extent that such restriction may affect MedAppsAB’s disclosure of PHI in its encrypted form.
Requested Uses and Disclosures. The PatientRounds Application encrypts all Health-Related Information - including PHI - that Users input, upload or store to the PatientRounds Application. And MedAppsAB lacks the ability to access or use such information. Still, to the extent possible and applicable, you shall not request MedAppsAB to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by you. Term and Termination. Term. The Term of this BA Agreement shall be effective as of your acceptance of the Terms of Service to which this BA Agreement is an Exhibit, and shall terminate when all the PHI you have inputted, uploaded or stored to the PatientRounds Application, is destroyed in accordance with the termination provisions in this Section. Termination For Cause. In addition to any termination rights set forth in the Terms of Service, in the event of a material breach of this BA Agreement, the other party shall either: (i) provide the breaching party with an opportunity to cure the breach or end the violation, and terminate the Terms of Service (including this BA Agreement) if the breaching party does not cure the breach or end the violation within sixty (60) days, or (ii) immediately terminate the Terms of Service (and this BA Agreement) if cure is not possible. Termination upon Issuance of Guidance or Change In Law. If the Secretary provides additional guidance, clarification or interpretation on the Privacy Rule, or there is a change or supplement to the HIPAA statutes or regulations (both referred to as a “HIPAA Change”), such that a party hereto determines that the service relationship between MedAppsAB and you is no longer a Business Associate relationship as defined in HIPAA, such party shall provide written notice to the other party of the HIPAA Change, and upon mutual agreement of the parties that the HIPAA Change renders this BA Agreement unnecessary, this BA Agreement shall terminate and be null and void. Effect of Termination. 5.4.1 Upon termination of this BA Agreement, for any reason, MedAppsAB shall - after the expiration of seven years from date of termination of this BA Agreement - destroy all PHI you have inputted, uploaded or stored to the PatientRounds Application. MedAppsAB shall retain no copies of the PHI. Miscellaneous. Your Rights and Remedies Upon Breach By MedAppsAB. In the event MedAppsAB fails to perform its obligations hereunder or otherwise breaches this BA Agreement, you may exercise all rights and remedies available to you under the Terms of Service, subject to applicable limitations of liability set forth in the Terms of Service or such other conditions as may apply to your rights or remedies. Amendment. Each party agrees to take such action as is reasonably necessary to amend this Agreement from time to time as is necessary for Covered Entity to comply with the requirements of HIPAA Regulations as they may be amended from time to time; provided, however, that if such an amendment would materially increase the cost of MedAppsAB providing the PatientRounds Application under the Terms of Service, MedAppsAB shall have the option to terminate the Agreement on thirty (30) days advance notice.
Survival. The respective rights and obligations of MedAppsAB under Section 5.4 of this BA Agreement shall survive the termination of the Terms of Service. Interpretation. Any ambiguity in this BA Agreement shall be resolved in favor of a meaning that permits you and MedAppsAB to comply with the Privacy Rule, Security Rule and Breach Notification Rule. Regulatory References. A reference in this BA Agreement to a section in the Privacy Rule, Security Rule or Breach Notification Rule, as applicable means the section as in effect or as amended. Choice of Law. This BA Agreement shall be governed by, and construed in accordance with, the laws of the State of California, exclusive of conflict of law rules.
Conflict in Terms. In the event of any conflict between the terms and conditions of this BA Agreement and the terms and conditions of the other provisions of the Terms of Service, the terms of this BA Agreement shall prevail. Last updated: May 1, 2016