Doctronic privacy label

“We use a third-party email service provider, Braze, to send treatment-related and other emails. Braze is a service provider operating under a Business Associate Agreement with Doctronic. When you open one of our emails or click a link in it, Braze records engagement data including your IP address, device type, and a timestamp, associated with your account.”

“We use Clerk to manage member account authentication (sign-up, sign-in, session management). Clerk is distinct from the identity verification providers described below: Clerk authenticates that you are the holder of your Doctronic account, while CLEAR and Verified perform identity proofing required for medical record access and prescription services. Clerk processes your email address or phone number (whichever you used to register) and authentication credentials.”

“CLEAR (clearme.com) is used to verify your identity when you access your medical records through our Individual Access Services (IAS) under TEFCA, and may also be used for prescription renewal identity verification. When you verify through Clear, we transmit your name, date of birth, and address to CLEAR for identity matching.”

“Verified (verified.inc) may be used for identity verification in connection with prescription renewal services. Verified receives your phone number and returns verified demographic information (such as name, date of birth, and address).”

“Payment information (processed by Stripe; we do not store card numbers)”

“Prescription history (Surescripts)”

“Medical records (TEFCA/QHIN via MedAllies)”

“Apple HealthKit data (heart rate, blood pressure, sleep, activity)”

“HIPAA-aligned cloud infrastructure (AWS, Microsoft Azure, Google Cloud Platform), all covered by Business Associate Agreements”

“HIPAA-aligned cloud infrastructure (AWS, Microsoft Azure, Google Cloud Platform), all covered by Business Associate Agreements”