HIPAA Notice of Privacy Practices
How protected health information (PHI) may be used and disclosed, and your rights.
Template for illustration — a compliant Notice of Privacy Practices must be prepared and reviewed with qualified counsel. Last updated: 2026.
Our commitment
OtMedlink is committed to protecting the privacy and security of your protected health information (PHI) in accordance with applicable law, including HIPAA where it applies.
How PHI is used
For treatment (coordinating your care with clinicians), payment (billing and insurance), and healthcare operations (running the platform securely). We use the minimum necessary information for each purpose.
Safeguards
Technical safeguards include encryption in transit and at rest, row-level access controls, authentication, and an immutable audit log of every access to and change of PHI.
Disclosures
We disclose PHI only to your care team, to service providers under Business Associate Agreements, or where required or permitted by law.
Your rights
You have the right to access and obtain a copy of your PHI, request corrections, receive an accounting of disclosures, request restrictions, and be notified of any breach affecting your information.
Contact
To exercise your rights or raise a concern, contact our Privacy Officer at privacy@otmedlink.com.