HIPAA Compliance Statement

Last Updated: 11/10/2024

At LeanNest, protecting your privacy and securing your health information is a top priority. We comply with the Health Insurance Portability and Accountability Act (HIPAA) to ensure that your Protected Health Information (PHI) is managed in a secure and compliant manner.

1. Commitment to Privacy and Security

LeanNest is committed to protecting the confidentiality, integrity, and availability of our users’ health information. We have implemented administrative, physical, and technical safeguards to comply with HIPAA’s standards and regulations. Our practices include secure data handling, user authentication, and continuous monitoring to protect against unauthorized access.

2. Protected Health Information (PHI)

As part of providing telehealth services, LeanNest may collect, store, and process PHI, which includes any information related to your health, medical history, or treatments that may personally identify you. Examples of PHI we handle include:

• Medical records and health assessments.
• Prescription information.
• Communication records between you and healthcare providers.

3. HIPAA-Compliant Safeguards

To protect your health information, LeanNest employs a variety of HIPAA-compliant safeguards, including:

• Encryption: All PHI is encrypted during transmission and at rest to prevent unauthorized access.
• Access Controls: We use robust user authentication processes to ensure that only authorized personnel can access PHI.
• Audit Controls: Regular audits and monitoring of access logs help us track and prevent unauthorized access or disclosure.
• Employee Training: All employees who handle PHI receive training on HIPAA compliance, confidentiality, and data security.

4. Business Associate Agreements

LeanNest partners with third-party service providers to support our operations. In cases where these third parties may access or process PHI, we require them to sign a Business Associate Agreement (BAA). This agreement legally binds them to adhere to HIPAA standards for safeguarding PHI.

5. Your Rights Under HIPAA

Under HIPAA, you have specific rights regarding your health information, including:

• Right to Access: You may request a copy of your health information that we maintain.
• Right to Amend: If you believe your health information is incorrect or incomplete, you may request an amendment.
• Right to Privacy: You have the right to know how your PHI is used and shared.
• Right to Confidential Communication: You may request that we communicate with you in a specific way to ensure confidentiality.

6. Reporting Concerns

If you have questions about our HIPAA compliance practices or wish to report a potential privacy concern, please contact us:

Contact Information:

• Email: contact@leannest.com
• Address: [address]

7. Updates to Our HIPAA Compliance Statement

LeanNest may update this HIPAA Compliance Statement periodically to reflect changes in regulations or practices. We encourage users to review this page regularly to stay informed about our commitment to privacy and security.