Notice of Privacy Practices & HIPAA Policy

1. Our Commitment to Protected Health Information (PHI)

Neuron Healthcare Services ("Neuron") is committed to safeguarding the privacy and security of your Protected Health Information (PHI). We apply physical, administrative, and technical safeguards intended to meet the requirements of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and HITECH.

2. Permitted Uses and Disclosures of Health Information

We may use and disclose your health information without explicit prior authorization for:

• Treatment: Providing in-home nursing, aide assistance, coordinating with your primary physician, and consulting with specialized therapists.
• Payment: Submitting claims to Medicare, Medicaid, private insurers, or processing patient payments.
• Healthcare Operations: Quality assessment audits, training healthcare staff, licensing surveys, and compliance monitoring.

3. Your Individual Health Record Rights

Under federal law, clients and authorized personal representatives have the right to:

• Inspect and obtain an electronic copy of your clinical records through our secure Patient Portal.
• Request an amendment to your health records if you believe information is incorrect or incomplete.
• Receive an accounting of non-routine disclosures of your protected information.
• Request confidential communications through alternative means or email addresses.

4. Website Analytics

Our public website may use Google Analytics to count page visits and clicks on our "Book" and phone links, so we can see which pages help people find care. Analytics never runs on the booking form, video visits, document signing, or the Patient Portal, and we do not send names, contact details, or health information to it. If your browser sends a Global Privacy Control signal, analytics is turned off for you.

5. Google Account and Google Calendar Data

You can sign in to the Patient and Team Portal with your Google account. When you do, we receive only your name, email address, and profile photo from Google, and use them to identify you and show your photo in the portal.

Team members and administrators may also choose to connect their Google Calendar. With your permission, the portal:

• Reads the times you are busy, and the titles of events you share, so visits and meetings are not booked over your existing commitments and so your schedule appears on your portal calendar.
• Adds, moves, and removes the visits, meetings, and video-visit (Google Meet) events that you or our office book through the portal, and sends the matching Google invitations to their guests.

We store only what this needs: a secured connection key, and the start and end times of your busy periods (with titles only where you allow it). Event details are read from Google when you open them and are not kept. We do not sell Google data, use it for advertising, or share it with anyone except to provide these features, and people at Neuron do not read it except to give you support you ask for, for security, or where the law requires.

You can disconnect your calendar at any time from the portal or from your Google Account's third-party access settings; disconnecting deletes the stored key and busy times.

Neuron's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Privacy Officer Contact

To exercise your privacy rights or file an inquiry regarding PHI protection, contact our Privacy Officer at privacy@neuronhs.com or call (856) 389-5089.