Navigated to Devoted Health Notice of Privacy Practices page

Devoted Health Notice of Privacy Practices

Your information. Your rights. Our responsibilities. 

Effective September 1, 2023

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

We are required by law to:

  • Maintain the privacy and security of your health information
  • Provide you with this notice
  • Comply with this notice
  • Tell you if there’s any breach of your health information

For more information about any of our privacy practices, to exercise your privacy rights, or to file a complaint, contact our privacy officer at:

Emily Reilly, Privacy Officer
Devoted Health, Inc.
PO Box 21327
Eagan, MN 55121
1-800-338-6833 (TTY 711)

Your rights

When it comes to your health information, you have certain rights.

This section explains your rights and some of our responsibilities to help you.

Get an electronic or paper copy of your health information

  • You can ask us for an electronic or paper copy of the health information we have about you. We may charge a reasonable, cost-based fee.
  • We’ll provide a copy or summary of your health information within 30 days after you ask us in writing (or 60 if we need extra time).
  • In certain cases we may deny your request, like if it might put someone in danger. If we deny your request, we’ll explain why and how you can appeal. 

Ask us to correct your health information

  • You can ask us to correct any records you think are incorrect or incomplete. Ask us how to do this. We may say “no” to your request, but if we do, we’ll tell you why in writing within 60 days.

Request confidential communications

  • You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will consider all reasonable requests, and must say “yes” if you tell us you’d be in danger if we don’t.

Ask us to limit what we use or share

  • You can ask us not to use or share certain health information. 
  • In most cases, we are not required to agree to your request, and we may say “no” if it would affect your care. If we do agree, we’ll follow your request (unless it’s an emergency).

Get a list of who we’ve shared your information with 

  • You can ask for a list of the times we’ve shared your health information, who we shared it with, and why — for up to the past 6 years. 
  • This list is called an “Accounting of Disclosure” and it may not include certain disclosures, such as those related to treatment, payment, and healthcare operations, and those required by law. 
  • We’ll respond to your request within 60 days (or 90 if we need extra time). 
  • We’ll provide 1 list a year for free but may charge a reasonable, cost-based fee if you ask for another one within 12 months. We’ll tell you the fee in advance in case you want to change your mind. 

Choose someone to act for you

  • If you have given someone a power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. Before we take any action, we’ll check that the person has this authority and can act for you. 

Get a copy of this privacy notice

  • You can ask for a paper copy of this notice at any time, even if you have agreed to receive it electronically. We will provide it promptly.

File a complaint if you believe your privacy rights have been violated

  • You may file a complaint with us or with the Secretary of the federal Department of Health and Human Services Office of Civil Rights. 
  • To file a complaint with us, send your complaint in writing to our Privacy Officer using the contact information on the first page of this notice. 
  • We will not retaliate against you for filing a complaint. 

Your choices

What we share with your family, close friends, or others involved in your care

  • If you have a clear preference, tell us what you want us to do. We’ll follow your instructions on when and how to share your information, including what you’d like us to share after your death.
  • If you aren’t able to tell us your preference, for example if you’re unconscious, we may go ahead and share your information if we believe it’s in your best interest. We may also share your information when needed if there’s a serious and imminent threat to health or safety. 

Whether we sell your information or use it for marketing

  • We’ll never sell your information or use it for marketing unless you tell us in writing that we can. 
  • This also applies to sharing your information for any other reason not included in this notice. 
  • If you tell us we can, you may change your mind at any time — just let us know in writing.

How we use and share your health information

We typically use or share your health information in the following ways.

This includes sharing information with your health plan sponsor or those involved in your healthcare for any of these purposes.

Treat you or help manage your treatment, for example:

  • Share your information with healthcare professionals who are treating you — to help them deliver high quality care or to check that they're treating you
  • Tell you about other treatment options or health-related services that may interest you

Bill or pay for your services, for example:

  • Pay and manage claims, coordinate benefits, pre-authorize services, and collect premiums
  • Review healthcare services you get to check if they’re medically necessary and if they’re covered
  • Share your information with providers so they can get or provide payment for your treatment

Run (administer) our organization, health plan, and clinical staff, for example:

  • Evaluate the quality of care you get from in-network or preferred providers
  • For audits, risk management, underwriting, or ratemaking — note that we can’t use genetic information to determine whether you can enroll in a health plan or what your premium will be
  • Work with third-party services including, but not limited to, billing, consulting, or transcription (only if we have agreements that require them to follow the law and protect your information)

We are also allowed or required to share your information in other ways.

This is usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes. For more information see: hhs.gov/hipaa/for-individuals.

Help with public health and safety issues, such as:

  • Preventing disease
  • Helping with product recalls
  • Reporting adverse reactions to medications
  • Reporting suspected abuse, neglect, or domestic violence
  • Preventing or reducing a serious threat to anyone’s health or safety

Do health research

  • Only if you agree or if an Institutional Review Board or Privacy Board approves it

Comply with the law

  • When local, state, or federal laws require us to share your information

Address workers’ compensation, law enforcement, and other government requests

  • For workers’ compensation claims
  • For law enforcement purposes or with a law enforcement official
  • With health oversight agencies for activities authorized by law
  • For special government functions such as military, national security, and presidential protective services

Respond to a legal action

  • This includes legal actions like a lawsuit, court or administrative order, or subpoena

Certain other situations

  • With organ procurement organizations in response to organ and tissue donation requests
  • With a coroner, medical examiner, or funeral director after your death
  • With a jail, prison, or law enforcement official, if you are in their custody

State and other federal laws may have stricter requirements than the Health Insurance Portability and Accountability Act of 1996 (HIPAA) on how we use and share your health information. If any of these laws apply, we will follow them. For example, in some situations, the law may require us to get your written permission to use or share your health information related to mental illness, developmental disability, alcohol or drug abuse treatment, reproductive health, genetic test results, and communicable diseases such as HIV or sexually transmitted infections. 

We may collect or receive information about you from third parties (including providers, hospitals, and other partners or vendors) when those third parties provide services to you or to Devoted. This includes when you use technology related to these services — see our internet privacy policy for more details. Once we receive that information, we follow all the rules outlined above in terms of how we use, share, and protect it.

We can change the terms of this notice. 

If we do, the changes will apply to all information we have about you, starting on the new notice’s effective date. The new notice will be available on our website, you can contact our Privacy Officer to get a copy, and we’ll include information about how to request a copy in our next yearly mailing.

This notice applies to the following DEVOTED HEALTH, INC. affiliated companies:

  • Devoted Health Insurance Company
  • Devoted Health Insurance Company of Alabama, Inc.
  • Devoted Health Insurance Company of Arizona, Inc.
  • Devoted Health Insurance Company of Colorado
  • Devoted Health Insurance Company of Hawaii, Inc.
  • Devoted Health Insurance Company of Illinois
  • Devoted Health Insurance Company of Pennsylvania, Inc.
  • Devoted Health Insurance Company of South Carolina
  • Devoted Health Insurance Company of Tennessee, Inc.
  • Devoted Health Insurance Company of Texas
  • Devoted Health Plan of Alabama, Inc.
  • Devoted Health Plan of Arizona, Inc.
  • Devoted Health Plan of Colorado, Inc.
  • Devoted Health Plan of Florida, Inc.
  • Devoted Health Plan of Illinois, Inc.
  • Devoted Health Plan of North Carolina, Inc.
  • Devoted Health Plan of Ohio, Inc.
  • Devoted Health Plan of Oregon, Inc.
  • Devoted Health Plan of Pennsylvania, Inc.
  • Devoted Health Plan of South Carolina, Inc.
  • Devoted Health Plan of Tennessee, Inc.
  • Devoted Health Plan of Texas, Inc.
  • Devoted Medical Group of Texas, Inc.
  • Devoted Medical Group, PLLC (FL)
  • Devoted Medical Group, PC
  • Devoted Medical NC, PC
  • Devoted Medical PA, PC
  • Devoted Medical, PC (IL)

These entities have designated themselves as an "Affiliated Covered Entity" for purposes of compliance with federal privacy laws. An Affiliated Covered Entity is a group of health plans and/or healthcare providers under common ownership or control that designates themselves as a single entity for purposes of compliance with HIPAA.