MyCare Application Privacy Notice

MYCARE APPLICATION PRIVACY NOTICE

The Children's Mercy Hospital (“CMH” or “we”) has created this Privacy Notice to demonstrate its commitment to privacy rights and protection of personally identifiable information.  This Privacy Notice describes the types of information CMH may collect from users (“you”) of the MyCare mobile application, including the software, information, services, and/or data contained therein (the “Application”).

Acceptance of the Privacy Notice.

Please read this Privacy Notice carefully to understand our policies and practices regarding how we will manage and protect personally identifiable information collected through the Application.  If you do not agree with this Privacy Notice, you must not use the Application.

Children’s Privacy.

CMH is committed to protecting the privacy of patients. Some, but not all, App features and functionality are directed towards children under 13. The MyCare Application COPPA Privacy Policy applies to the information we collect from children under 13 through the App.

Information We Obtain and How We Collect It.

CMH collects several types of information when you use the Application, including:

• Health status information about the patient, including pain, stool output, diet, medications, sleep, energy/mood, and nausea.
• Care plans developed and provided by the patient’s health care providers via charts, graphs, and calendars.
• Research study data on the patient.
• Your and/or the patient’s email address.
• Usernames and passwords.
• Non-identifiable information about you or the patient.
• Information about your internet connection, the equipment you use to access the Application, and usage details.

CMH collects this information:

• Directly from you when you provide us with information about you.
• Automatically as you use the Application. Information collected automatically may include details about your use of the Application (such as logs, other communication data, and usage patterns) and information about your technological equipment.   

The technologies CMH uses for this automatic data collection may include “cookies.” A "cookie" is a small text file stored on the hard drive of your computer.  The Application may use transient "cookies" during a site visit but does not gather information from a user's computer. CMH uses “cookies” to enhance Application usability and to store users’ preferences. The "cookie" is erased when the visit ends.

How CMH Uses Information.

CMH uses information collected through the Application:

• To provide information to the patient’s care providers to assist them in monitoring the patient’s care.
• To improve the Application.
• To develop new services and ideas.
• To better administer and troubleshoot the CMH information technology systems.
• In any other way we may describe when you provide the information.
• For research, if you consent or if an Institutional Review Board approves the research.
• For any other purpose with your consent.

How CMH Discloses Information.

CMH may disclose aggregated information about our users, and information that does not identify any individual.

CMH may disclose personally identifiable information for the following purposes:

• To fulfill the purpose for which you provide it.  For example, we may provide information to the patient’s care providers, some of which may be incorporated into the patient’s medical record.
• To contractors, service providers and other third parties who work on behalf of CMH. CMH does not authorize such third parties to use or disclose personally identifiable information except as necessary to perform the work on CMH’s behalf or to comply with legal requirements.
• To comply with any court order, law, or legal process, including to respond to any government, licensing, accreditation or regulatory agency or entity.
• To enforce or apply the MyCare Application Terms of Use and other agreements.
• For any other purpose with your consent (including research consent, if applicable).
• For any other purpose disclosed by CMH to you when you provide the information.

Images.

For your convenience, the Application enables you to take photographs of your immunization card(s) and health insurance card(s) (collectively, “Images”).  Your use of this image capture feature is voluntary.  If you elect to use such features, please understand that your immunization and/or health insurance cards may contain personally identifiable information and that the Images will be stored within the Application on your mobile device.  The Images are not transmitted to or otherwise received or viewed by CMH as a result of your use of such feature. Therefore, you should take reasonable measures, such as implementing password protections on your mobile device, to limit access to the App only to you.  CMH is not responsible for you use of these Images.

CMH Accounts and Passwords.

When you use the Application, you are not anonymous to CMH.  You are responsible for taking all reasonable steps to ensure that no unauthorized person has access to your CMH account(s) or password(s), if applicable. 

Data Security.

CMH maintains safeguards to ensure the security of personally identifiable information about you and the patient. For example, all personally identifiable information obtained through the Application is automatically encrypted using industry standard encryption technology. However, no method of transmission over the internet, or method of electronic storage, is 100% secure. Therefore, while CMH strives to use commercially acceptable means to protect personally identifiable information, CMH cannot guarantee its absolute security.

The safety and security of personally identifiable information also depends on you.  Where CMH has given you or where you have chosen a password for access to certain parts of the Application, you are responsible for keeping this password confidential.

International Transfers of Personally Identifiable Information to the United States.

CMH is located in the United States. The Application is provided for access and use only by persons located in the United States. You are not authorized to use the Application outside the United States.

Access to the Application by certain persons or in certain countries may not be legal.  If you access the Application from outside the United States, you do so at your own risk and are responsible for compliance with local laws.

If you are using the Application outside the United States, you agree that CMH may transfer personally identifiable information that you provide from the country where you are accessing the Application to the United States.  If you are accessing the Application from a country within the European Economic Area (“EEA”), you understand that United States’ laws may not be as protective as those in the EEA, and you consent to transmission to, and collection and processing of, personally identifiable information about you or the patient outside the EEA, in accordance with this Privacy Notice. You further acknowledge that the United States has not received a finding of “adequacy” from the European Union under Article 45 of the Regulation (EU) 2016/679 (General Data Protection Regulation). CMH collects and transfers to the United States personally identifiable information with your consent; to perform a contract with you; or to fulfill a legitimate interest of ours in a manner that is not overridden by your rights and freedoms. CMH endeavors to apply suitable safeguards to protect the privacy and security of your personally identifiable information and to use it only consistent with your relationship with us and the practices described in this Privacy Notice.

Your Rights Concerning Personally Identifiable Information.

If you would like to access, amend, erase, transfer, or object to or restrict the processing of personally identifiable information, you may submit a request to privacyofficer@cmh.edu . CMH will promptly review all such requests in accordance with applicable laws.  

Depending on where you live, you may have a right to file a complaint with a supervisory authority or other regulatory agency if you believe that we have violated any of the rights concerning personally identifiable information about you or your patient. CMH encourages you to first reach out to us at privacyofficer@cmh.edu so CMH has an opportunity to address your concerns directly before you do so.

Retention of Personally Identifiable Information.

CMH will retain personally identifiable information about you or the patient for the period necessary to fulfill the purposes for which personally identifiable information about you or your patient has been collected as outlined in this Privacy Notice, unless a longer retention period is required by law.

Scope of Privacy Notice.

This Privacy Notice applies only to the personally identifiable information obtained by CMH through the Application. 

Changes to this Privacy Notice

CMH reserves the right to change, modify or otherwise update this Privacy Notice at any time.  Such changes or updates will be effective immediately upon notice thereof, which may be given by posting in the Application, by electronic or conventional mail or by any other means by which you obtain notice of the changes or updates. The date the Privacy Notice was last revised is identified at the top of this Privacy Notice.  You are responsible for visiting this Privacy Notice from time to time to check for any changes to CMH’s privacy practices.

Contact Information

To ask questions or comment about this Privacy Notice and CMH’s privacy practices, contact CMH at:

The Children’s Mercy Hospital

Attn: Privacy Officer

2401 Gillham Road

Kansas City, MO 64108

or, via email at: PrivacyOfficer@cmh.edu