Mobile Application Privacy Policy

Information is collected in a HIPAA-compliant platform and is not shared with third-parties for marketing purposes.

Owner and Data Controller: Texas Health Resources

Owner contact email: MyChartHelp@texashealth.org

Types of Data collected: Among the types of Personal Data that this Application collects, by itself or through third parties, there are:

Location

• approximate location (network-based)
• precise location (GPS and network-based)

Phone

• directly call phone numbers

Photos/Media/Files

• read the contents of your USB storage
• modify or delete the contents of your USB storage

Storage

• read the contents of your USB storage
• modify or delete the contents of your USB storage

Camera

• take pictures and videos

Microphone

• record audio

Other

• receive data from Internet
• view network connections
• pair with Bluetooth devices
• access Bluetooth settings
• full network access
• change your audio settings
• run at startup
• control vibration
• prevent device from sleeping

For Android Users: Required Google Play Disclosures for Certain Health Apps

Google has determined MyChart is subject to their COVID-19 apps requirements. As a result, we are required to provide the following information so we can make MyChart available to you in the Play store.

• Mychart interacts with your microphone only if you choose to use your microphone to navigate our mobile apps. MyChart interacts with your camera roll only if you choose to add a profile photo to a profile, when adding an attachment to a MyChart message, when uploading proof of your COVID-19 vaccine card, and when uploading your insurance cards.
• MyChart accesses, collects, uses, and shares your information as stated in the section titled, “The Limited Ways We Use Your Information.”
• MyChart was not created specifically for the COVID-19 pandemic. It existed before the COVID-19 pandemic to allow you to access your health information on file. Texas Health allows you to access COVID-19-related vaccination information, laboratory test results, and documents with illness-related information using MyChart. You may choose if or how you want to access, display, or use the information - just like you can make those decisions about health information relating to other conditions, services, tests, or vaccinations.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application. Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service. Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner. Any use of Cookies - or of other tracking tools - by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document. Users are responsible for any third-party Personal Data obtained, published, or shared through this Application and confirm that they have the third party's consent to provide the Data to the Owner.

Mode and Place of Processing the Data

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can contact the Owner.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for or retained as required by law. The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Device permissions for Personal Data access, Analytics, Registration and authentication, Access to third-party accounts, Registration and authentication provided directly by this Application and Advertising. For specific information about the Personal Data used for each purpose, the User may contact the Owner.

Device permissions for Personal Data access

Depending on the User's specific device, this Application may request certain permissions that allow it to access the User's device Data as described below. By default, these permissions must be granted by the User before the respective information can be accessed. Once the permission has been given, it can be revoked by the User at any time. In order to revoke these permissions, Users may refer to the device settings or contact the Owner for support at the contact details provided in the present document. The exact procedure for controlling app permissions may be dependent on the User's device and software. Please note that the revoking of such permissions might impact the proper functioning of this Application. If User grants any of the permissions listed below, the respective Personal Data may be processed (i.e accessed to, modified or removed) by this Application.

Approximate location permission (continuous)

Used for accessing the User's approximate device location. This Application may collect, use, and share User location Data in order to provide location-based services.

Camera permission

Used for accessing the camera or capturing images and video from the device.

Contacts permission

Used for accessing contacts and profiles on the User's device, including the changing of entries.

Microphone permission

Allows accessing and recording microphone audio from the User's device.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or--as far as technically and legally feasible--sending a notice to Users via any contact information available to the Owner.

The Limited Ways We Use Your Information

We do not sell or license your information. These are the limited ways we interact with your information in connection with MyChart:

• When you choose to add a profile photo to MyChart, you may select an existing photo on your device or take a new photo using the camera app on your device. If you select an existing photo on your device, we store a copy of your chosen photo in app-private storage on your device. If you use the camera app on your device to take a new photo, the photo you take is first saved to your camera app and then also saved to app-private storage on your device. If you remove the photo from your profile or delete MyChart, the copy of the photo is deleted from the app-private storage, but the photo saved to your camera app remains available in your camera app until you choose to delete it.
• When you choose to use Apple's HealthKit or Google Fit, we create encrypted identifiers to identify recipients of your Apple's HealthKit or Google Fit data and store them on your device in app-private storage. If you choose to stop using Apple HealthKit or Google Fit or delete MyChart, the identifiers are deleted.
• When you choose to view documents (such as letters or images) using MyChart, to make the files viewable for you we temporarily store copies on your device in app-private storage. The temporary copies are deleted when you close your session on MyChart.
• If you choose to enable automatic appointment arrival (aka Hello Patient) we temporarily store identifiers and times for your upcoming appointments in app-private storage to detect when you arrive for an upcoming appointment. If you choose to stop using MyChart or you disable automatic appointment arrival, the identifiers are deleted.
• For location-based check in of in-person appointments, or for finding healthcare providers near you, you may choose to allow MyChart to interact with your location data for those purposes. We do not store your location data.
• While you use MyChart, Epic collects non-identifying information so they can provide customer service to you or Texas Health Resources and understand how people use MyChart so we can improve our products. This information includes the time you began using the app, the healthcare organization you interacted with (Texas Health Resources), any error messages or codes, the model of device used and its operating system, and the version of our mobile app used. If you use Android devices, we also collect your connection type (cellular or Wi-Fi) during an error.

MyChart may interact with your sensitive data to provide certain features, such as video visits or mobile appointment check-in. The first time you try to use any of these features, we will ask for your consent within the app and will only allow you to use a feature if you give consent. You do not have to provide consent if you do not want to allow MyChart to interact with your data as requested. MyChart is developed by Epic Systems Corporation; please refer to Epic’s Mobile Application Privacy Policy for Patients for more detailed information about the limited ways they may interact with your information to make your use of MyChart possible.

MyChart may offer location-based check-in for in-person appointments or allow you to find healthcare providers near you. The first time you try to use any features that use your location, we will ask for your consent within the app and will only access your location if you give consent. You do not have to provide consent if you do not want to allow MyChart to use your location. We do not store your location data.