Privacy Policy
Effective Date: May 16, 2025
Last Updated: November 30, 2025
Who We Are
Health Now is a primary-care clinic providing in-person and telehealth services to patients in North Dakota, South Dakota, and Minnesota.
Address: 705 E. Main Ave, Bismarck, ND 58501
Phone: (701) 502-4669
Protected Health Information (PHI) We Collect
When you become a patient or use our online tools, we may collect PHI such as:
-
Name, date of birth, address, phone number, and email
-
Medical history, treatment information, diagnoses, and medications
-
Insurance information and billing records
-
Communication through our patient portal
-
Uploaded forms, clinical documents, or lab results
We only collect the minimum necessary information needed to provide care and comply with HIPAA requirements.
How We Use Your Information
We use your PHI to:
-
Provide medical evaluation and treatment
-
Coordinate care and communicate with you
-
Schedule appointments and manage the patient portal
-
Submit insurance claims (if applicable)
-
Process payments
-
Conduct internal quality improvement
-
Comply with legal and regulatory requirements
We do not sell PHI or share it for marketing without your explicit, written authorization.
HIPAA Compliance
Health Now complies with the Health Insurance Portability and Accountability Act (HIPAA).
This includes:
-
Maintaining administrative, technical, and physical safeguards
-
Providing HIPAA training to staff
-
Limiting access to PHI to authorized personnel
-
Using HIPAA-compliant tools and partners (Business Associate Agreements where required)
-
Monitoring systems for unauthorized access
-
Offering patients access to their records as required by law
Our full Notice of Privacy Practices (NPP), required by HIPAA, is available upon request and posted separately.
HITECH Act Compliance
Health Now adheres to the Health Information Technology for Economic and Clinical Health (HITECH) Act, including:
-
Breach notification requirements
-
Encryption of data stored and transmitted through our systems
-
Security risk assessments and mitigation practices
-
Use of certified EHR/telehealth platforms that meet federal security standards
If a breach of unsecured PHI occurs, we will notify affected individuals in accordance with HITECH requirements.
Technology and Security Measures
To protect your information, Health Now uses:
Electronic Medical Records & Patient Portal
We utilize AdvancedMD, a HIPAA-compliant platform with role-based access controls, encryption, audit logging, and secure messaging.
Telehealth Platform
Telehealth visits use Zoom for Healthcare integrated within AdvancedMD, which includes:
-
End-to-end encryption
-
Enforced security settings
-
Protected meeting environments
-
HIPAA Business Associate Agreement (BAA)
Data Storage
Electronic data is stored on secure AWS servers, which meet HIPAA and HITECH physical and technical safeguard requirements.
Payment Processing
Payments are processed via AdvancedMD's payment processor, a secure, PCI-compliant system.
Website & Forms
Our website may collect limited personal information through contact forms.
These forms are encrypted and transmitted securely.
Website analytics (e.g., cookies) may track non-identifiable data such as page views or device type.
Cookies and Website Analytics
We may use cookies or analytics tools to improve website performance.
These tools collect non-identifiable information such as:
-
Browser type
-
Device type
-
Time spent on pages
-
Navigation paths
This data does not contain PHI.
You may disable cookies in your browser settings.
Third-Party Service Providers
We may share necessary information with vendors who help operate our clinic. Examples include:
-
Telehealth platforms
-
Billing and payment processors
-
Electronic medical record systems
-
Secure email or messaging systems
All vendors with access to PHI must sign a Business Associate Agreement (BAA) and comply with HIPAA rules.
We do not allow third parties to access PHI for advertising.
Your Rights - Patient's Rights & Responsibilities
Under HIPAA, you have the right to:
-
Access your medical records
-
Request corrections
-
Request confidential communications
-
Request restrictions on the use of your PHI
-
Obtain a copy of our Notice of Privacy Practices
-
Receive breach notifications
To exercise these rights, contact:
(701) 502-4669
Children's Privacy
Our website is not intended for children under age 18 without parental or guardian involvement.
We do not knowingly collect information from minors without consent.
Links to External Website
Our website may include links to third-party sites.
We are not responsible for their privacy practices or content.
Changes to This Privacy Policy
We may update this Privacy Policy periodically.
Changes are effective once posted with an updated effective date.
Contact Us
If you have questions about this Privacy Policy, HIPAA, or how your information is protected, contact:
Health Now
705 E. Main Ave, Bismarck, ND 58501
Phone: (701) 502-4669
Fax: (833) 608-1015
Email: brittany@healthnowapp.com