Privacy Policy

Introduction

Pilothouse Health ("we", "us", or "our") operates a Remote Therapeutic Monitoring (RTM) platform that helps medical practices stay connected with patients between visits. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform, including when you receive SMS communications from us.

By enrolling in the Pilothouse Health RTM program, you agree to the terms of this Privacy Policy.

Information We Collect

We collect the following types of information:

Information provided by your medical practice:

• Full name
• Date of birth
• Medical record number (MRN)
• Email address
• Mobile phone number
• Insurance information
• Assigned provider name

Information you provide directly:

• Health log data including pain level, mood, activity, sleep, and overall improvement scores
• Any additional information submitted through the patient portal

Technical information:

• Device type and browser information
• Log-in timestamps
• IP address

How We Use Your Information

We use your information to:

• Deliver the Remote Therapeutic Monitoring program on behalf of your medical provider
• Send weekly SMS reminders to submit your health log
• Send email reminders and program communications
• Share your health log data with your assigned provider and care team
• Generate billing reports for RTM reimbursement purposes
• Improve the platform and patient experience
• Comply with applicable laws and regulations

SMS Communications

By enrolling in the Pilothouse Health RTM program, you consent to receive SMS text messages from Pilothouse Health. These messages are limited to:

• Weekly reminders to submit your health log
• Program enrollment and onboarding communications
• Responses to help, opt-in, and opt-out requests

Message frequency: Approximately one message per week.

Message and data rates may apply depending on your mobile carrier plan.

To opt out: Reply STOP to any SMS message at any time. You will receive a confirmation and no further messages will be sent.

To opt back in: Reply START to re-enroll in SMS reminders.

For help: Reply HELP or contact us at team@pilothousehealth.com or (925) 238-3607.

HIPAA Compliance

Pilothouse Health is a Business Associate of your medical provider under the Health Insurance Portability and Accountability Act (HIPAA). We maintain appropriate administrative, physical, and technical safeguards to protect your Protected Health Information (PHI) in accordance with HIPAA requirements.

Your health log data is:

• Encrypted in transit and at rest
• Accessible only to your assigned care team
• Never sold to third parties
• Never used for advertising purposes

How We Share Your Information

We do not sell, rent, or trade your personal information to any third party.

The only information we share outside of Pilothouse Health is your mobile phone number, which is provided to our SMS delivery provider solely for the purpose of sending your weekly health log reminder. This provider is bound by a confidentiality agreement and is not permitted to use your number for any other purpose.

Your health log data is shared with your assigned medical provider and care team as part of delivering the RTM program. It is not shared with any other party except as required by law.

Data Retention

We retain your information for as long as you are enrolled in the RTM program and for a period thereafter as required by applicable healthcare regulations and our agreements with your medical provider.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to applicable legal and contractual obligations
• Opt out of SMS communications at any time by replying STOP
• Contact your medical provider to exercise your rights under HIPAA

To exercise any of these rights, contact us at team@pilothousehealth.com.

Security

We implement industry-standard security measures to protect your information, including encryption, secure access controls, and regular security reviews. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's Privacy

The Pilothouse Health platform is not intended for use by individuals under the age of 18 without parental consent. We do not knowingly collect personal information from children under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by sending you an email or SMS notification. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.