Legal
Consumer health data privacy
Draft v0.2 — last updated 30 August 2026. Not yet in effect. A final version reviewed by counsel replaces this page before launch.
This notice covers consumer health data, as defined by Washington's My Health My Data Act, Nevada SB 370 and Connecticut law. It is separate from our general Privacy policy because those laws require it to be.
What we collect
- Answers you give during an online visit — your state, your age, the condition you are seeking care for, relevant medical history, current medications, and where relevant self-reported height and weight
- Your email address
- The treatments you added to your plan before starting a visit, which travel with your submission as context for the provider
We collect this directly from you. We do not buy health data, and we do not infer health conditions from your browsing.
Why we collect it
For one purpose: so a licensed provider can review your visit and decide whether treatment is appropriate. We also use your email to tell you what happened with your visit.
Who it is shared with
- The licensed provider reviewing your visit
- The pharmacy that would fill a prescription, if one is written
- The vendors that store our data and send our email, each under a written agreement covering health information
We do not sell consumer health data, and we do not share it for cross-context behavioural advertising.
What we deliberately do not do
- No advertising or analytics trackers run inside a visit. Analytics stops at the door of the intake, by design.
- No health details or condition names appear in web addresses, so nothing about your care leaks into browser history, referrer headers or server logs.
- If a visit is declined, your answers are cleared from the device rather than left behind.
Your rights
Where these laws apply to you, you have the right to know what consumer health data we hold, to obtain a copy of it, to withdraw consent to its collection and sharing, and to have it deleted — including by any third party we shared it with. Exercising these rights will not lead to worse service.
Deletion is subject to medical record-retention law: once a provider has reviewed a visit, that record belongs to a medical record set the provider entity is legally required to keep for a period set by state law. We will tell you plainly which parts of a request we can and cannot honour, and why.
To make a request, or to appeal a refused one, write to privacy@reviverxcare.com. We will verify that a request is really coming from you before acting on it.
Who is responsible
ReviveRx Plus operates this platform and is responsible for the data described here. Once your visit is reviewed, the professional entity providing your care is responsible for the resulting medical record — see the Notice of Privacy Practices.