HIPAA Notice

Last updated: Feb 11, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: January 1, 2026

Introduction

HarvardCare at Home (“we,” “us,” or “our”) is committed to protecting the privacy of your health information.
We are required by law to maintain the privacy of your protected health information (PHI), to provide you with this
Notice of Privacy Practices, and to follow the terms of the Notice currently in effect.

HarvardCare at Home is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

This Notice describes how we may use and disclose your protected health information and your rights regarding that information.
“Protected health information” (PHI) is information about you, including demographic information, that may identify you
and relates to your past, present, or future physical or mental health condition, the provision of health care to you,
or payment for that health care.

1. How We May Use and Disclose Your Health Information

We may use and disclose your protected health information without your written authorization for the following purposes:

A. Treatment

We may use and disclose your health information to provide, coordinate, and manage your health care and related services,
including:

Providing wound care, skilled nursing, and therapy services in your home
Consulting with other healthcare providers involved in your care
Sharing information with your physician to coordinate your treatment plan
Referring you to other healthcare providers or specialists
Sharing information with hospital discharge planners
Communicating with family members or caregivers involved in your care (with your permission)

Example: We may share your wound assessment and treatment plan with your physician or wound care specialist to ensure coordinated care.

B. Payment

We may use and disclose your health information to obtain payment for services we provide, including:

Billing Medicare, Medicaid, or your health insurance company
Verifying insurance coverage and eligibility
Obtaining prior authorization for services
Submitting claims and supporting documentation
Collection of amounts owed
Medical necessity reviews

Example: We may submit claims containing diagnosis and treatment information so your insurer can pay for services.

C. Health Care Operations

We may use and disclose your health information for our internal operations, including:

Quality assessment and improvement activities
Staff training and credentialing
Accreditation, certification, and licensing activities
Audits, compliance reviews, and risk management
Business planning and administrative activities
Customer service and complaint resolution

Example: We may use health information to evaluate and improve the quality of our wound care services.

D. Appointment Reminders and Health-Related Communications

Appointment reminders for scheduled visits
Follow-up care instructions
Information about treatment alternatives or health-related benefits

E. Individuals Involved in Your Care

We may disclose your health information to a family member, friend, or other person involved in your care or payment
for your care, unless you object.

F. As Required by Law

We will disclose your health information when required by federal, state, or local law.

G. Public Health Activities

Preventing or controlling disease or injury
Reporting births, deaths, or diseases
Reporting adverse reactions to medications
Reporting suspected abuse, neglect, or domestic violence

H. Health Oversight Activities

Audits, investigations, and inspections
Licensing and accreditation activities
Government benefit programs and civil rights enforcement

I. Legal Proceedings and Law Enforcement

We may disclose your health information in response to a court order, subpoena, or other lawful process,
or to law enforcement officials as permitted by law.

J. Other Permitted Uses

Coroners, medical examiners, and funeral directors
Organ and tissue donation
Research approved by an Institutional Review Board
To prevent a serious threat to health or safety
Workers’ compensation claims
Military, national security, and correctional institutions as required by law

2. Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your health information for purposes not described above,
including:

Marketing communications
Sale of health information
Most uses and disclosures of psychotherapy notes

Communications initiated by you, including appointment requests, inquiries submitted through our website,
or phone calls requesting services, are not considered marketing under HIPAA.

You may revoke an authorization at any time in writing. Revocation will not affect disclosures already made.

3. Your Rights Regarding Your Health Information

Access and obtain copies of your medical and billing records
Request corrections or amendments
Request restrictions on certain uses and disclosures
Request confidential communications
Receive an accounting of certain disclosures
Be notified of a breach of unsecured PHI
Obtain a paper copy of this Notice

4. How to Exercise Your Rights

Submit written requests to:

HarvardCare at Home
Privacy Officer
Los Angeles, California
Email: info@woundcareathomela.com
Phone: (323) 484-4440

5. Our Duties

Maintain the privacy and security of your PHI
Provide this Notice and follow its terms
Notify you of breaches as required by law

6. Changes to This Notice

We reserve the right to change this Notice and make the revised Notice effective for all PHI we maintain.
Updated versions will be posted on our website and available upon request.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with:

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-800-368-1019
Website: www.hhs.gov/ocr/complaints

You will not be retaliated against for filing a complaint.

This HIPAA Privacy Notice is effective as of January 1, 2026.