Notice of Privacy Practices

1. About This Notice

Revelation Diagnostics, LLC d/b/a Healos (“Healos,” “we,” “us”) facilitates direct-access laboratory testing through an independent physician network and CLIA-certified reference laboratories. The physicians and laboratories that process your lab orders are likely HIPAA “covered entities.” Healos operates as a Business Associate of these covered entities under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the HITECH Act. This Notice describes our practices regarding protected health information (“PHI”) that we create, receive, maintain, or transmit on behalf of covered entities in connection with your use of our services.

2. Uses and Disclosures of PHI

We may use or disclose your PHI for the following purposes:

• Treatment: To facilitate the ordering, processing, and delivery of laboratory tests ordered through our platform, including transmitting orders to reference laboratories and delivering results to you and your ordering physician.
• Payment: To process payments for lab tests and related services, and to generate receipts and billing records.
• Healthcare Operations: To support quality assurance, compliance auditing, and internal analytics necessary to operate and improve our services.
• As Required by Law: We may disclose PHI when required by federal, state, or local law, including public health reporting and law enforcement requests accompanied by valid legal process.
• With Your Authorization: For any use or disclosure not described in this Notice, we will obtain your written authorization before using or disclosing your PHI.

3. Your Rights Regarding Your PHI

You have the following rights with respect to your PHI:

• Right to Access: You may request a copy of your PHI that we maintain. We will provide it in the electronic format you request if readily producible.
• Right to Amend: You may request that we amend your PHI if you believe it is inaccurate or incomplete. We may deny the request in certain circumstances and will explain our reasoning in writing.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI that we have made during the six years prior to your request.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI. We are not required to agree to all restrictions but will honor a request to restrict disclosure to a health plan for services you paid for in full out of pocket.
• Right to Confidential Communications: You may request that we communicate with you at a specific address or by a specific method.
• Right to a Paper Copy: You may request a paper copy of this Notice at any time.

4. Our Duties

We are required to:

• Maintain the privacy of your PHI and provide you with this Notice of our legal duties and privacy practices.
• Notify you if a breach of unsecured PHI occurs that affects your information, as required by HIPAA and the HITECH Act.
• Follow the terms of this Notice currently in effect. We reserve the right to change the terms of this Notice and to apply the new provisions to all PHI we maintain.

5. Breach Notification

In the event of a breach of unsecured PHI, we will notify you in accordance with applicable law. Notification will be made without unreasonable delay and no later than 60 days after discovery of the breach.

6. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

To file a complaint with us, contact: privacy@healos.com

To file a complaint with HHS: hhs.gov/hipaa/filing-a-complaint

7. Contact Information

For questions about this Notice or to exercise any of your rights, contact us at:

Revelation Diagnostics, LLC d/b/a Healos
Attn: Privacy Officer
17305 Saint James Ct, Boca Raton, FL 33496
Email: privacy@healos.com