Privacy Policy

Most health information we hold about a patient is held on behalf of that patient’s healthcare provider, not for ourselves. Under HIPAA we act as a Business Associate of the practice that invited you. Your provider decides what is collected and who may see it, and their own Notice of Privacy Practices governs how your medical record is used.

What follows describes our own handling. If you want your record corrected, restricted or deleted, your provider is the right place to start, and we will support whatever they instruct.

Before Gensec Connect collects anything, you are taken through a consent process: a plain-language explanation of what is being asked, and then a series of decisions you make one at a time. Clinical use, genetic testing and taking part in research are each a separate choice, and some states add their own. You sign it, and you keep a copy.

Until that is done we collect nothing and share nothing. Each choice stands on its own: agreeing to one is not agreeing to the rest, and declining any of them does not affect your care.

Health readings from your phone

When you accept an invitation in Gensec Connect and grant permission, we read the measurements you chose to share from Apple Health or Health Connect: blood pressure and pulse, weight, body temperature and basal body temperature. Each reading carries the date and time it was taken, an identifier from your phone’s health store, and the device model that recorded it, where the platform provides one.

Readings from a device or wearable account

If you connect a device account, such as Withings, Oura or Garmin, we receive the measurements that account holds. You choose how much history comes with it.

Account information

Your name and email address, where you have an account. Accounts are managed for us by Clerk.

Connection information

The invitation link you followed, and a device token stored in your phone’s keychain or keystore that identifies this phone to us. The token is a credential, not a profile.

Website usage

This website uses Google Analytics to count visits and see which pages are read. That is marketing analytics for the website only. The Gensec Connect app contains no analytics or advertising software of any kind.

This covers every reading we hold for you, whether it reached us from your phone or from a device account you connected.

• We read only the measurement types you agreed to share.
• Access to your phone’s health store is read-only. Gensec Connect never writes anything back into Apple Health or Health Connect.
• We use your readings to deliver them to the care team who invited you, and to show them back to you in the app.
• We do not use your readings for advertising or marketing.
• We do not sell your personal health record.
• Readings from Apple Health and Health Connect are not used for advertising, or for any use-based data mining other than improving health, medical and fitness management, or medical research.
• Anything beyond your care and the running of the service, taking part in research included, is one of the choices in the consent described above. It does not happen unless you chose it, and you can withdraw that choice.
• The app does not keep a copy of your readings on your phone beyond what Apple Health or Health Connect already holds. Only the device token and opaque sync markers are stored locally.

Alongside the readings on your phone, you can connect a device or wearable account so its measurements reach your care team too.

How connecting works

We never ask for the password to that account. You authorise us with the provider directly yourself, which you can revoke at any time.

No third-party aggregator

The software holding these connections runs on our own infrastructure. Your device data is not routed through a separate aggregation company.

Disconnecting

Disconnect any account in the app, or revoke our access from the provider’s own settings. New readings stop; readings your care team already received stay part of your record.

If that changes

If we ever route device connections through a third party, we will name them here before we do it.

• The care team who invited you. This is the point of the service. You are shown who they are before you agree to share anything.
• Service providers who run our infrastructure. Amazon Web Services hosts the platform, and Clerk provides account sign-in. They act on our instructions and may not use your information for their own purposes.
• Where the law requires it. A court order, a lawful request from a regulator, or a legal obligation we cannot refuse.

Some Gensec services involve uses of your information that go beyond your direct care. Those are governed by a separate consent agreement you are asked to sign, which sets out what it permits. Nothing in that category happens unless you have given that consent, and you may withdraw it.

The platform runs on Amazon Web Services. Information is encrypted in transit, and access is restricted to the people who need it to run the service or to deliver your care. Your device token is held in your phone’s keychain or keystore, which only unlocks while the phone is unlocked.

Stop sharing at any time

Open Gensec Connect, go to Settings, and choose Stop sharing readings. Your care team stops receiving new readings from that phone immediately. This cannot be undone from inside the app: to start again, your care team has to send you a new invitation.

Change what the app can read

Your phone’s own settings control which health data Gensec Connect may access, and you can change or revoke that at any time without opening our app.

Readings already shared

Readings your care team has already received stay part of the medical record they hold, which they are generally required to retain. Ask your provider about that record.

Access, correction and deletion

Write to us at the address below and we will help. Where the information sits in a provider’s medical record, we will act on that provider’s instructions.

Gensec Connect is intended for patients invited by their care team and is not directed at children under 13. We do not knowingly collect information from children under 13 other than at the direction of a healthcare provider treating that child.

If we change this policy we will update the date at the top. Where a change materially affects how health information is handled, we will tell you in the app before it takes effect.

GenSecHealth, Inc.
15310 Amberly Drive, Suite 250, Tampa, FL 33647, United States

support@gensechealth.com · +1 (813) 515-0100