HIPAA Notice of Privacy Practices

Effective Date: June 10, 2026  ·  Last Updated: June 10, 2026

This Notice of Privacy Practices ("Notice") describes how PatientTrac Revela and the covered healthcare providers who use it ("we", "us") may use and disclose your Protected Health Information (PHI) and your rights regarding that information, in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act.

How We May Use and Disclose Your Health Information

Treatment

We use your PHI to provide, coordinate, or manage your healthcare and related services. For example, your physician may use clinical documentation in Revela to plan surgical procedures, track post-operative recovery, and communicate with other treating providers.

Payment

We may use and disclose PHI to obtain payment for healthcare services, including submitting claims to your health insurance, Medicare, or Medicaid.

Healthcare Operations

We may use PHI for internal operations including quality assessment, staff training, legal compliance, and audit activities required by ONC §170.315(d)(2).

AI-Assisted Clinical Decision Support

Revela uses Anthropic Claude for clinical decision support (surgical flags, procedure suggestions). PHI identifiers (name, DOB, SSN, MRN, address, insurance ID) are stripped before any data is sent to AI services. A Business Associate Agreement is maintained with Anthropic.

Your Rights Regarding Your Health Information

• Right to Access: You have the right to inspect and receive a copy of your PHI in Revela in electronic format (EHI export per ONC §170.315(b)(10)).
• Right to Amend: You may request amendments to your PHI if you believe it is incomplete or inaccurate.
• Right to an Accounting of Disclosures: You may request a list of instances in which we disclosed your PHI for purposes other than treatment, payment, or operations.
• Right to Restrict: You may request restrictions on certain uses and disclosures of your PHI, though we are not always required to agree.
• Right to Confidential Communications: You may request we communicate with you at a specific location or by a specific method.
• Right to a Copy of This Notice: You are entitled to a paper or electronic copy of this notice upon request.

Breach Notification

In the event of a breach of unsecured PHI, we will notify you in accordance with 45 CFR §164.400–414, including written notice within 60 days of discovery and, where required, notification to HHS and media.

To Exercise Your Rights or File a Complaint

Contact our Privacy Officer:
privacy@patienttracforge.com
PatientTrac, LLC  ·  HIPAA Privacy Officer

You also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights: hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.