Notice of Privacy Practices

Who We Are

LeanPathMD LLC ("LeanPathMD," "we," "us," or "our") operates a telehealth platform that connects patients with independently contracted, licensed healthcare providers. This Notice of Privacy Practices ("NPP") describes how we, and the Providers who use our platform, may use and disclose your Protected Health Information ("PHI") and your rights regarding that information.

We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act to maintain the privacy of your PHI and to provide you with this NPP.

How We May Use and Disclose Your PHI

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we share your intake information with the licensed Provider reviewing your case, and share your prescription with the dispensing pharmacy.

Payment

We may use and disclose your PHI to obtain payment for services rendered. For example, we share information necessary to process your payment through our payment processor, Stripe.

Healthcare Operations

We may use and disclose your PHI for our internal operations, including quality assessment, training, audits, and legal compliance activities.

Required by Law

We will disclose your PHI when required to do so by federal, state, or local law, including in response to a court order or lawful subpoena.

Public Health Activities

We may disclose your PHI to public health authorities for activities such as reporting communicable diseases or adverse drug reactions as required by law.

Serious Threats to Health or Safety

We may use or disclose your PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Business Associates

We share PHI with our Business Associates — vendors who perform services on our behalf — under written Business Associate Agreements that require them to protect your PHI. Our Business Associates include Supabase (database hosting), Google Cloud (infrastructure), and Stripe (payment processing).

Uses and Disclosures Requiring Your Authorization

Other than as described above, we will not use or disclose your PHI without your written authorization. This includes:

• Marketing communications
• Sale of your PHI
• Most uses of psychotherapy notes

You may revoke your authorization at any time in writing, except to the extent we have already acted in reliance on it.

Your Rights Regarding Your PHI

Right to Access

You have the right to inspect and obtain a copy of your PHI that we maintain. Requests may be submitted to support@leanpathmd.com. We will respond within 30 days.

Right to Amend

If you believe your PHI is incorrect or incomplete, you may request an amendment. We may deny the request under certain circumstances and will explain any denial in writing.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI during the past six years, other than disclosures for treatment, payment, or healthcare operations.

Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI. We are not required to agree to all restrictions, but we will consider your request.

Right to Confidential Communications

You may request that we communicate with you about your PHI by alternative means or at an alternative location (e.g., a different email address). We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You may request a paper copy of this NPP at any time, even if you have agreed to receive it electronically.

Our Duties

We are required by law to maintain the privacy of your PHI, to provide you with this NPP, and to follow the terms of the NPP currently in effect. We reserve the right to change our privacy practices and the terms of this NPP at any time. Changes will apply to PHI we already hold. An updated NPP will be posted on our website and effective upon posting.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

To file a complaint with us, contact:

LeanPathMD LLC — Privacy Officer
5900 Balcones Drive, Suite 100
Austin, TX 78731
Email: privacy@leanpathmd.com

To file a complaint with HHS Office for Civil Rights: hhs.gov/ocr

Contact Us

LeanPathMD LLC
5900 Balcones Drive, Suite 100
Austin, TX 78731
Email: support@leanpathmd.com