My Health My Data Policy

Call-On-Doc.com, Inc. (“Call-On-Doc”, “Company”, “we”, “us”, or “our”) has developed this Policy as required by certain state laws, known as My Health My Data (MHMD) laws. It applies to personal data defined as Consumer Health Data that is collected from you by Call-On-Doc.

This Policy supplements the Call-On-Doc Website Privacy Policy and our Health Information Privacy Policy (HIPAA Privacy Policy).

Definition: Consumer Health Data

Consumer Health Data means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status, condition, or diagnosis, including but not limited to:

• Gender affirming health data
• Reproductive or sexual health

This Policy does not apply where an exemption or exception applies under state laws such as for Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).

As a care provider, most of the health-related data Call-On-Doc collects and uses is excluded from MHMD laws because it is regulated under HIPAA. See our HIPAA Privacy Policy and Website Privacy Policy for details about PHI and other data not subject to MHMD.

Collection of Personal Information

As described in our privacy policies, the personal data we collect depends on your interactions with us, the choices you make, the tools and features you use, your location, and applicable law.

We may collect the following categories of personal information, which may be considered Consumer Health Data if not excluded from MHMD laws:

• Personal Identifiers: name, alias, SSN, date of birth, driver’s license or ID number, passport number
• Contact Information: address, email, phone number
• Account Information: username, password, credentials for Secure Portal access
• Protected Classifications: race, gender, national origin, age, disability, medical or mental conditions, etc.
• Commercial or Transactional Data: payment information
• Internet/Network/Mobile Data: IP, browser, OS, cookies, device type, etc.
• Geolocation Data: IP-based or GPS location
• Online Portal/Mobile App Usage: username, password, usage history, file logs, submissions
• Visual or Audio Recordings: patient messages, meetings
• Medical and Health Information: symptoms, conditions, diagnosis, vaccination status
• Inferences: derived data or health-related conclusions

Excluded Categories (Not Subject to MHMD)

• PHI under HIPAA
• Health care data in medical records
• De-identified information per HIPAA
• Information used only for public health purposes

Purposes for Collection and Usage

Call-On-Doc generally does not use Consumer Health Data as defined in MHMD laws, since most data collected falls under HIPAA.

However, personal data (including Consumer Health Data, if applicable) may be used for:

• Fulfilling the purpose for which information was provided
• Processing and maintaining transaction records
• Infectious disease purposes
• Text opt-in/opt-out tracking
• Notifications and communications
• Scheduling and managing appointments
• Maintaining declination records
• Responding to consumer inquiries or support requests
• Improving user experience and understanding demographics
• Detecting security incidents or identity theft
• Debugging or repairing functionality
• Protecting against malicious or illegal activity
• Other lawful purposes or those requiring consent (e.g., marketing)

Sources of Consumer Health Data

Call-On-Doc collects Consumer Health Data only when you voluntarily provide it or consent to its collection (e.g., through cookies).

Sources include:

• You (via website/app forms, or social media)
• Employees, contractors, vendors, or partners
• Cookies (essential or consent-based)
• Social media platforms (LinkedIn, Meta, X)
• Company systems or databases you log into

Sharing of Consumer Health Data

Most data shared by Call-On-Doc is excluded from MHMD laws. Consumer Health Data will only be shared with employees and trusted partners to provide requested services or as required by law. Third parties are bound by confidentiality agreements.

Categories of Third Parties

• Financial institutions
• Government agencies
• Promotional/fulfillment vendors
• Marketing and website hosting vendors
• Communication vendors (email, SMS, phone)
• Payment processors and transaction vendors
• Data analytics providers
• Social media platforms (LinkedIn, Meta, X)
• Consumer or credit reporting agencies
• IT, cybersecurity, and privacy vendors
• Insurance carriers and brokers

Consumer Rights

Under MHMD laws, you have rights regarding your Consumer Health Data, including:

• Right to Know
• Right to Access
• Right to Delete
• Right to Withdraw Consent

To Submit a Request

1. Email: [email protected]
2. Call: 855-611-3653

Requests must include sufficient information for identity verification. If a request is denied, you may appeal.

If the appeal is unsuccessful, you can file a complaint with:

• Washington State Attorney General
• Nevada Attorney General
• Connecticut Attorney General

Changes to This Policy

Call-On-Doc may update this Policy periodically. The latest version will be posted on our website and app, along with the revised effective date. We encourage you to check regularly for updates.

Questions

If you have questions about this Policy:

• Email: [email protected]
• Phone: 855-611-3653

Last Updated: October 22, 2025