Atrium Health's Online Privacy Practices

When you use our Sites, you are accepting the terms of this Online Privacy Policy and giving us permission to collect your Personal Information for the purposes described below. You are also giving us (and our contracted vendors) permission to use your Personal Information to communicate with you about treatment and treatment-related information, payment, educational and promotional information and opportunities, and other health care operation purposes. We may contact you by phone, email, mail, or text based on the contact numbers and addresses you provide, and we may do it in a pre-recorded, automatic dialing system, or scripted messages. We may also contact you through social media, such as by sending you information about a topic through a Facebook ad.

“Personal Information” is information that, either alone or when combined with other information, identifies or relates to a particular individual. Examples of Personal Information include (but are not limited to) name, email address, phone number, date of birth, mailing address, health information, and online identifiers. This information may come from forms you fill out on our Sites or information we derive from your behavior while using our Sites. Personal Information is different than Protected Health Information, which is protected under HIPAA, but they may overlap. It is also important to note that aggregated information (information from multiple people that has been put together such that you cannot identify an individual) is not considered Personal Information or Protected Health Information.

We use Personal Information for the following purposes:

• To provide our Sites to you, including to make them more user friendly and useful or to customize them based on your interests and activity on the Sites.
• To analyze, administer, and improve the Sites, as well as the services we provide to our patients and consumers. For example, we may use Personal Information to help us identify better Site features or to provide more resources on a particular topic our Site traffic indicates is popular.
• To analyze and evaluate how people are using our Sites and use that information to make decisions about how to best communicate with people about our services. We may also use the information to identify where we should expand our locations or offer different types of services. For example, if we see a lot of inquiries about pediatric services are coming from a particular zip code, we may review other data we have to see if it makes sense to open a pediatric clinic in that location.
• To send information, resources, and educational materials, both in response to your request and your behavior on our Sites. For example, we may send you information about a new primary care practice opening in your area or provide you with information about a cancer screening event we are offering. We may also send you surveys to see how we are doing and if your experience is going well.
• To respond to inquiries on our Sites, such as if you need help with something or you want to sign up for a service we offer.
• To share information with our third-party vendors and contractors, such as vendors who help us set up and maintain the Sites, analyze the information, and send out communications, in addition to other services.
• To support secure use of the Sites. While we cannot guarantee security, we work hard to provide a secure site; Personal Information helps us verify whether our security measures are in place and when to update them.
• To detect potential fraud or abuse of the Sites. Please note that we do not allow our Sites to be used for inappropriate, harassing, threatening, or illegal behavior. We reserve the right to terminate and block access to users who exhibit such behavior and we can do so with no warning or rights of recourse by you.
• To protect our rights or our property. Please note that our name and logo are the property of Atrium Health and are protected. We also own the Sites, in part and in whole, and there are restrictions on what you can do with the information you access on our Sites.
• To meet our legal obligations, defend our organization, and in the event of an emergency.
• To keep information in our databases so we can benchmark how our Sites and services are being used.
• For other purposes related to the reasons for which you provide Personal Information, and for other administrative and internal business purposes.

Note that we will not sell your Personal Information without your express permission.

In various places on the Sites, we request information from you through forms, such as interest forms and questionnaires. The exact information we need to collect (including Personal Information) will depend on the purpose of the form. For example, when you sign up to create an account, we will ask for your name, address, email address, and date of birth. If you want to schedule an appointment, we will ask for your age, sex, date of birth, reason for visit, and type of appointment. If you pay your bill, we will also collect payment information (which is processed securely through a third-party payment processor). If you want information about services we offer (such as senior care, maternity, orthopedic, or general care), we may need your name, email, and the types of information you interested in so we can send resources to you.

We will indicate on the form if a particular field is mandatory or optional. Please note that if you choose not to provide certain information, we may not be able to provide requested services. You are always welcome to call us at 800-821-1535 and speak to someone if you prefer.

There are certain types of information that we automatically collect when you use our Sites.

Our mobile apps are subject to Google’s COVID-19 apps requirements.  As a result, we are required to provide the following information so we can make our mobile apps available to you in the Play store.

Our mobile apps access, collect, use, and share your information as stated above in the section titled, “How we Use Personal Information.”

• Our mobile apps were not created specifically for the COVID-19 pandemic.  They existed before the COVID-19 pandemic to allow you to access your health information.  You may access COVID-19-related vaccination information, laboratory test results, and documents with illness-related information using our mobile apps.  You may choose if or how you want to access, display, or use the information – just like you can make those decisions about health information relating to other conditions, services, tests, or vaccinations.
• You may choose to use our mobile apps to conduct telehealth appointments with your healthcare providers.  Our mobile apps provide the technical support for those appointments to happen. 
• The MyAtriumHealth mobile app will ask for certain permissions before you start using certain features. Your privacy and user experience are important to us, and you can enable or disable permissions at any time through your device settings.
  • Location Data
    MyAtriumHealth may use your location data to identify the closest urgent or ED locations, or to suggest healthcare providers that are near you. MyAtriumHealth will not store your location data.
  • Camera and Video
    MyAtriumHealth may use your camera to take new photos or to capture and transmit video for video visits. You choose if you want to use photos to personalize your account or send them as file attachments when you send messages to your healthcare providers.
  • Microphone
    MyAtriumHealth may use your microphone to capture audio for video visits. MyAtriumHealth will not store your audio data.
  • File Access and External Storage
    MyAtriumHealth may access your device's storage to read and write files, photos or videos you choose to use in MyAtriumHealth. These files, photos or videos may be used as attachments that are sent to your provider or they may be created from attachments sent to you from your provider.
  • Phone
    MyAtriumHealth may use your phone to call phone numbers displayed in the app. MyAtriumHealth will not store your call history or other call data.

This section describes to whom we disclose Personal Information and for what purposes.

• Third Party Vendors and Service Providers. We employ or contract with third parties to help us operate the Sites, manage our users and communications, and provide our services. For example, we engage third parties to provide analytics services, hosting services, website and app security, email marketing, mailing services, customer service (including online chats), and payment processing. These third parties have access to your Personal Information only to perform specific tasks on our behalf. We have written agreements in place with them that require they protect your Personal Information and follow confidentiality requirements.


• Organizations Involved in Mergers and Acquisitions Transactions. If we sell or otherwise transfer part or the whole of our business or assets to another organization (such as in a merger, acquisition, bankruptcy, dissolution, or liquidation), any information collected through the Sites, including Personal Information, may be among the items sold or transferred. In such cases, we will use reasonable efforts to notify you before your Personal Information is transferred or becomes subject to a different privacy policy, such as by updating this Online Privacy Policy.


• Law Enforcement, Government Agencies, and Courts. We may disclose Personal Information at the request of law enforcement or government agencies or in response to subpoenas, court orders, or other legal process to establish, protect, or exercise our rights or to defend against a legal claim or as otherwise required or allowed by law, or to protect the rights, property, or safety of any other person. We may also disclose Personal Information to investigate or prevent a violation by you of any contractual or other relationship with us or your illegal or harmful activity.


• Treatment, Payment, and Health Care Operations.In addition to the uses and disclosures of information outlined above, we may use and disclose health information collected online (such as when you make an appointment or when you access secure areas such as a patient portal to manage health records) in accordance with our Notice of Privacy Practices.

We work hard to protect the confidentiality and security of information we obtain in the course of business. We use commercially reasonable safeguards, such as industry-standard encryption technology, to help keep the information collected through the Sites secure. Despite efforts to store Personal Information in a secure operating environment, we cannot guarantee the security of Personal Information during its transmission or its storage on our systems. We also cannot guarantee that our security measures will prevent third parties such as hackers from illegally obtaining access to Personal Information. We do not represent or warrant that Personal Information about you will be protected against, loss, misuse, or alteration by third parties. You should take care to protect any user logins and passwords and be aware of the risks of transmitting information over the internet, by email, in blogs or chats, or when using online sites.

If you are using the Sites from outside the United States, please be aware that Personal Information may be transferred to, stored, and processed in the United States. Although we take steps to provide adequate safeguards, the data protection laws of the United States might not be as comprehensive as those in your country. By using the Sites, you consent to your information being transferred to the United States for the purposes described in this Online Privacy Policy. Note that you may be blocked from using our Sites depending on your location.

Children are expressly prohibited from using the Sites, except for MyAtriumHealth.org, which may be used by minors 13-17. We do not knowingly collect or solicit any Personal Information from children. In the event that we learn that we have collected Personal Information from a child, we will promptly take steps to delete that information.

We have no control over and assume no responsibility for the practices employed by any websites or services linked to or from our Sites, including the information or content contained within them. A link to a third party’s website should not be construed as an endorsement by Atrium Health in any way. We encourage you to investigate and ask questions before disclosing Personal Information to third parties, and we strongly advise you to review the privacy policy of every site you visit. We are not responsible for their activities or representations, and we assume no liability, even if you found the site through us.

We may modify or update this Online Privacy Policy at any time, for any reason, so please review it periodically. We may provide you with notice of material changes to the Online Privacy Policy as appropriate under the circumstances. Unless otherwise indicated, any changes to this Online Privacy Policy will apply immediately upon posting to the Sites.

If you have any questions about this Online Privacy Policy, the Sites, or how we handle your information, please fill out the Contact Us form or call us at 800-821-1535.