Welcome to HealthTree® or HealthTree Moves app, tools created by the HealthTree Foundation ("Company", "We", "Us"). HealthTree is a data platform for cancer patients, researchers and clinical practitioners to help advance cures.
This Policy applies to information we collect through the Platform, and through e-mail, text, chat and other electronic messages between you and the Platform, as applicable. The Policy does not apply to information collected by us offline or through any other means, including on any other website operated by Company or any third party, including through any application or content (including advertising) that may link to or be accessible from the Platform.
The purpose of this Policy is to explain how we collect and use information about you through the Platform, including personally identifiable information that you provide to us, such as your name, demographics, age, email address, phone number, birthdate, fitness level, and information about your medical history, health conditions, and prior treatments (“Personal Information”). We want you to know how your Personal Information will be protected, under what circumstances we may share it with third parties, and for what purposes.
Why We Collect Your Personal Information
HealthTree provides information about potential treatment options and clinical trials, which requires the collection of Personal Information in order to process and display personally relevant treatment possibilities and other information tailored to your needs, such as collective reports (e.g., time to progression based on treatment, fitness level impact on overall outcomes, etc.).
Consent to Collect Your Personal Information
We request your consent to collect your Personal Information when you register to use the Platform. In doing so, we also explain what information will be collected and how we plan to use your Personal Information. We also offer you the option of revoking your consent ("opting out" or "unsubscribing") if you later decide that you no longer want to use the Platform or receive additional information from us. If we wish to use this information for purposes incompatible with the purposes for which the data was initially collected, we will offer an effective way to opt out of the secondary use.
Personal Information We Collect From You
You must register to use HealthTree and create a profile that may include your Personal Information. We collect information about you relating to your care and treatment directly from you as well as from third parties, for example, from your health care providers or electronic integrations with your providers EHR systems. We limit the collection and processing of Personal Information to what is reasonable to fulfill the purposes for which it is to be used. You may be invited to participate in surveys facilitated by the Company or third parties, and we receive survey response information. We may collect and publish profile information and postings on the Platform to permit users to share information with each other and with other partners. We may also collect information you share with our support team.
Collection of Anonymous Computer Information
Third Party Services and Personal Devices
The Company may provide network integration with third party services and devices which can integrate health-related information or provide additional patient or caregiver services (such as Apple Health, Epic on FHIR, 1UP, The VA, Fitbit, genetic testing companies, bio-banks, etc.). If you choose to participate in the third party services, we may access the data collected by the third party services.
HealthTree Connect's Use of Apple Health Data
HealthTree has created the HealthTree Connect App. HealthTree Connect is a separate and distinct application from www.healthtree.org. HealthTree Connects purpose is to automate the manual process of entering your lab results into www.healthree.org and to show your treatment and clinical trial options. HealthTree Connect will not display any information within the app itself that is taken from Apple Health, this information can only be found in www.healthtree.org where you can edit or delete your information at anytime.
If you choose to connect Apple Health with HealthTree:
HealthTree will use the information to show your most up to date treatment options available for you.
HealthTree will use the information to show your most up to date clinical trials available for you.
You can provide consent in HealthTree for your specialist or physician to view your HealthTree profile which may include information received from Apple Health. You must grant individual permission to each specialist or physician listed in your profile. You have the ability to add or remove a specialist’s or physician’s access to your HealthTree profile at any time.
And you grant your specialist or physician access, they will be able to see your health information from all the hospitals you go to for treatment. This gives them a better overall picture of your current status.
You will also be able to view your own information and track your disease over time from multiple institutions all in one place.
Importing Data By Linking or Connecting to Third Party Accounts
You may choose to sync your Platform account from your other accounts held by third parties, such as healthcare providers Electronic Health Record (EHR), EPIC on FHIR, 1UP, The VA, Apple Health or wearable technology fitness monitors such as Fitbit or Apple Watch and genetic testing companies, bio-banks, etc.) When providing consent we will ask for your user name and password in order to connect your third party account.
By connecting your Platform account, you authorize the Platform to access your third party account information maintained by identified third parties, on your behalf as your agent, and you expressly authorize such third parties to disclose your information to us.
Please note that HealthTree may log in to your third party accounts from time to time to connect and update your Platform Account with information from your third party accounts. More specifically, HealthTree will only log in to your third party accounts to establish, maintain, or debug a secure connection and update or validate medical information in the Platform. Again, we will not share or disclose your Health Information or any other information associated with your third party accounts to any other party unless you expressly direct us to do so.
How We Use Your Information
We may use and disclose your Personal Information for the following purposes:
We may use and disclose information you have entered to communicate with you by email or phone for account management purposes, notifications and reminders, systems maintenance and other purposes.
We analyze the information we collect to improve patient care. We may share de-identified data to perform research and produce reports for you as a patient and for the research community.
Your data may be shared to comply with legal obligations, law enforcement requests, legal directives such as a court order or subpoena, or to protect your, our or others’ rights, property, or safety.
When you participate in surveys that we or our partners facilitate, your profile information may be shared with your survey responses. Participation in such surveys is optional.
If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of assets, or transition of service to another provider, your Personal Information may be disclosed in connection with the negotiation of such transaction, and/or sold or transferred as part of such a transaction as permitted by law and/or contract. You will be notified by email twice prior to any ownership or transition of service changes. Upon your request, your entire HealthTree profile which includes your account information and all of your data will be permanently deleted.
We do not contract with insurance companies or provide insurance companies access to your Personal Information. However, we cannot guarantee that insurance companies will not be able to access the de-identified information publicly available on HealthTree’s website.
We will not disclose your Personal Information to the general public. We do not host advertising on our site and will not sell your Personal Information for third-party marketing purposes.
Access to Information
You may access and update the information you post to HealthTree using your user profile dashboard. You may remove any information you have added to your HealthTree user profile at any time.
When you correct or amend information through HealthTree, such action may not affect the information that other users have already obtained through the Platform. For example, if a researcher began using your de-identified information for a research project prior to when you changed such information, the researcher may continue to use the information previously obtained.
You may permit us to obtain your health information directly from an online patient portal provided to you by your healthcare provider by signing a consent form. We will extract data from health records available through such portal and post it to your user profile on the Platform. If you would like to correct or update such information, or revoke your consent, please contact us at email@example.com.
We maintain all accounts as active acounts regardless of use or how frequently accessed. We do not delete accounts due to lack of use over a certain period of time.
Why Should You Share Your Data
Curing cancer is a group effort, no one individual is going to find a cure alone. There is power in numbers and when we combine our medical information together the power becomes unmeasurable. Our lives become one big story that has the context researchers are looking for.
At HealthTree we believe the answers to a cure is out there but we can't get to it. Sharing your data allows researchers to see you as a whole person rather than just a certain part of you at a certain time. Building a robust flow of data that represents you, provides the potential to find the answers that move us to a cure faster.
Many of the recently approved treatments started in development 17 years ago. That is way too long for life saving drugs and we believe by sharing out data can cut that time in half if not more.
How We Protect Your Information
You agree that the information you provide to us through the Platform is accurate and that you will keep it up-to-date. When you register for a user profile on the Platform, you will be asked to provide a password. You are solely responsible for maintaining the confidentiality of your user profile and password, and you accept responsibility for all activities that occur under your user profile. If you believe that your account is no longer secure, you must immediately notify us at firstname.lastname@example.org.
The account in question will be immediately deactivated while we investigate the suspected issue. Any issues discovered will be addressed to prevent further security issues. The account holder and any other accounts affected by the issue will be notified of any actions required on their part.
Company is not a “covered entity” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and therefore is not required by law to comply with HIPAA’s requirements for handling protected health information. Company has a security program in place that seeks to mitigate risk and to use reasonable and appropriate procedures and technologies to help protect the confidentiality of Personal Information collected through the Platform. We periodically review and modify our security policies and procedures, as appropriate.
Please note that despite our precautions, no website can be absolutely protected against intentional or malicious intrusion. Furthermore, Company does not control the devices, computers, or network over which you may choose to send Personal Information to the Platform, and therefore cannot prevent potential interceptions or compromises to your information while in transit to the Platform. Company has implemented measures designed to safeguard your Personal Information, but cannot make any guarantees as to the security, integrity, or confidentiality of electronic communications made over the Internet or any information transmitted to or from or maintained on the Platform.
Applicable to California Residents
California Civil Code Section § 1798.83 permits users of the Platform that are California residents to request certain information regarding the disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us at email@example.com.
If you reside in California, you have the right to ask one (1) time each year if we have shared your Personal Information with third parties for their direct marketing purposes. Keep in mind, at the present time we do not share any information for marketing purposes. If you would like to make a request, send an email to firstname.lastname@example.org indicating that you are a California resident making a “Shine the Light” request.
Company operates solely in the United States, and the Platform is intended to be used by persons residing in the United States. If you choose to use our Services from the European Economic Area, the United Kingdom or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note by accessing and using the Platform you consent to the transfer of your Personally Identifiable Information to the United States and the processing of your information in the United States. By providing any information, including personal information, on or to the Platform, you consent to such transfer, storage, and processing and acknowledge that US law may not offer the same privacy protections as the law of your jurisdiction.
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us at email@example.com.
In certain circumstances, you may have the following data protection rights:
The right to access, update or to delete the information we have about you.
The right of rectification.
The right to object.
The right of restriction.
The right to data portability.
The right to withdraw consent.
Platform Not Intended For Use By Children Under 13 Years of Age
We do not knowingly collect Personal Information from children under 13 years of age. If you are under 13, do not use or provide any information on or through the Platform or any of its features, or provide any information about yourself to us, including your name, address, telephone number, e-mail address or any screen name or user name you may use. If we learn that we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete such information. If you believe we may have any information from or about a child under 13, please contact us at firstname.lastname@example.org.
If you have any questions, comments or concerns you may contact us at email@example.com, call us at 1-800-709-1113 or you can write to:
2600 Executive Parkway
Lehi, Utah 84043